gradm adds unneeded "sock_allow