No hardcoded default allowness.