directive that removes unauthorized elements