Single find & replace is exactly what this document tells you not to do, since that's how you get dumb^W suboptimal results like "denylisted" instead of sane^W more clear options like "denied".