Redmine#3903: hard classes should not be negated

Acceptance test in `staging`

See https://cfengine.com/dev/issues/3903