Redmine#3903: hard classes should not be negated

See https://cfengine.com/dev/issues/3903