To me (where English is a second language), Allowlist and denylist seem unclearer. Is it a block list, a exclude list, or a permission list? Allow/deny would lead me to the last one, as in authenticate users who has some permissions but not others.
Blacklist and whitelist would be closer to include/exclude, so the replacement would be a includelist and excludelist, or include/exclude as shorthand.
