Denials for new instances of a process - what to do?