PSST-60 auth.allow now an attribute