Fix draft3 `disallow` validation