Experiment a bit with `allow`.

It seems that you can't pass parametrized actions, like s_stop_sign(off)
to the allow list, which is why I changed all actions to
s_stop_sign_off, s_stop_sign_on etc.