use pointer

use func

comment on decider to clarify whether it allows or denies

fix set conf

gstw