enabled "deny" flags. Added docs