disallow /my and some new actions. close #11