Fix for polymorphic cluster security

The all flag was never set to false.