driconf: allowlist/denylist