Squash a few more on-boot and run-time denials.