I found a way that works. Essentially, I deleted the register lines and added the hosts with deny all and specific permit specs. I don't know why it works, but it does. jg