default purge deny