Isn't this a bit dangerous?  I'd have made this a DENYSOFT by default with an option for the hardliners to make it a DENY...