blacklist certain applications (i.e. allow-all, deny-by-exception rule)