added some _deny rules to templates that were generating laxist rules
added global_deny_rules
support for global_deny_rules