restrict allowed expressions