The server recipe performs a search as well to discover clients and add them using the ossec agent manager. We'll likely want to scope those too, else you might have some strange behavior - would you mind?