MRF: add user allowlist module