Add option for how to handle allowed => default from checkpoint in require_action_allowed helper method