server: do not overwrite allowed machines list on upgrade (closes #328)