Why does cron_system_entry() lack an allow entrypoint?