Changes default create permissions. Old way is to registered users to create anything by default. New way is to not allow users, registered or not, to create anything by default. You must explicity grant create permissions in your own Ability class.