We running spanning tree mst. Our typical access layer port config looks like this:

spanning-tree portfast
spanning-tree guard root
switchport access vlan 10

However, when a cable was plugged into two access-layer ports, a loop was created and neither port went into shutdown mode.

What is considered a best practice config for an access port in a spanning tree mst network?