Set restrict_actions in spec file, not at runtime.