Drop 'allow' and 'save_id' parameters. To remove file url, add 'url' => false to field options array
do not bail before getting to CMB2_Sanitize so that filters can run, as well as allowing empty file ID fields to be saved