user processes not hidden even though configured in policy