fixing the comment in the README to be correct for DenyOverrides default