added exclude_namespaces_by_user_group setting