AppOps: fix allow/reject counting