Allow RO/& to change settings no matter what maxauth is