model: update mo_may_allow restrictions