Configuring deny instructions