* When a host's policy status is unknown, there is no CTA to filter hosts by unknown policy status