r22803: Add some more flesh to the GPO security filtering (still very basic).