AllowInsecureClients is now an access flag, not an option flag