Cleanup allow-notify configuration
There's a slight inconsistency in the configuration of the default allow-notify ACL; it checks the options{} block even though it should only be checking global defaults.
This seems to have been introduced by mistake in commit e197a2bd.