Comment 4 for bug 1989008

As Ben notes, this is indeed as a result of our partial migration to privsep. As both Dan and Ben both hint at, the fact that privsep can do this simply proves that privsep is working. Unless there's something a user (as opposed to an operator) can do to exploit these overly broad filters, this doesn't feel like an exploit.