If LBE Security Master is enabled, only applications can be restricted

Refs #1231