Make allow/deny syntax consistent with that of add/delete