crud: added StrictCrudHelper.allowed_relations property