Clarify allow/deny rules