Filter deny aces take 2

[jakehildreth]

How's this one look, @SamErde?

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
⚠️ COPYPASTE	jscpd	yes		16	1.84s
⚠️ EDITORCONFIG	editorconfig-checker	26		1	0.2s
⚠️ MARKDOWN	markdownlint	1		11	0.66s
⚠️ MARKDOWN	markdown-link-check	1		9	2.23s
✅ MARKDOWN	markdown-table-formatter	1		0	0.34s
⚠️ POWERSHELL	powershell	25		17	33.76s
✅ POWERSHELL	powershell_formatter	25		0	22.9s
⚠️ REPOSITORY	checkov	yes		1	11.09s
✅ REPOSITORY	gitleaks	yes		no	0.44s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.17s
✅ REPOSITORY	secretlint	yes		no	0.83s
✅ REPOSITORY	trivy	yes		no	4.37s
✅ REPOSITORY	trivy-sbom	yes		no	1.24s
✅ REPOSITORY	trufflehog	yes		no	7.28s
⚠️ SPELL	cspell	27		266	7.0s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[SamErde]

I like your commit-ment. 🥁

[SamErde]

I like that you kept the negative check for safeusers (allow-list approach) vs a positive check for unsafe users.