add key to allowed