“Keep” is confusing and error-prone, “restrict” is consistent with the default button and much safer.