Don't let backup machines get application rights