Figure out how to disable allow/deny

[stubailo]

This can be as simple as adding deny rules for every collection

[stubailo]

@tmeasday is this somehow solved by collection 2? Back when we were going to make a new ValidatedCollection class or something, this could have been part of that, but it looks like we're not doing that anymore.

[tmeasday]

I think collection2 is designed to work with allow and deny if you want it to. But perhaps it could have an option to deny all?

[stubailo]

Yeah that's what I'm looking for.

[stubailo]

fc1ac60