Why are users able to write on CD/DVD when the EndPointSecurity agent should be blocking this functionality?