Change event default to deny

Deny other changes on events until they are implemented.
eg, don't allow updates or deletes until security/endpoints
are implemented.