execution: document additional mo_may_allow() optimization