Improve allow/deny docs