Check for an explicit 'yes' in CO_AVOID_BOX_CHECK

This fails safe in a nice way. If you typo 'yes' then you'll
get proper box checks, which is probably a good thing.