Wrong way round - default behavior was to allow it (be it a bug or not).