1. Allow setting this for the entire controller with the simplest form.
2. Only allow explicitly named actions.
3. Don't allow named actions and controller-level setting.