Better implementation of ignores in security config