added support for configuration-level exclusions

This fixes the issue with exclusions added at the configuration level instead of attached directly to a dependency