outbound: replace DENY/OK with constants.ok|deny

This addresses PR #758