The default SRP policy is disallowed for all executables, so this is a white-list approach.
As can be seen, C:\\Users\\%username%\\AppData\\Local\\Mozi
C:\\Users\\%username%\\AppData\\Local\\Mozi