Exclude apps from CAS based on pattern