allow nothing by default