Exclude 'confirmed' status from privileges