Added filter for denying a stream based on LDAP primary affiliation.