exclude resources from security