`allow_shell_hooks` is `true` by default despite what the documentation says

The documentation says `allow_shell_hooks` is false by default, but launching:
```sh
bump-my-version show allow_shell_hooks
```
... with the default config shows `True`.
