I had a lot of trouble with trying to do this, because the Docs don't explain that setting the flag for deny-spawn is different to setting other...
Separate names with a comma.