Why not just `ssl_allowed` without the actions list afterwards?