SECURITY: Don't allow badges on read restricted categories