Security policies can now be exempt from captive portals, using the command captive-portal-exempt enable.