add "Security & Privacy" exclude setting