Is it possible to exclude certain patchs (like bios) from the health graph or status?  We want to be able to monitor bios updates but are not going to apply these as frequently and would like to not have systems show as highly vulnerable due to this.