templates: oops, only if allowed