define 'script-security 2' if 'up' or 'down' directives were given