In the App Control / App Management section, under Trusted I selected Deny for network in two Universal Remote headings, one that had CCP under it and another for GZIP. But also and most important under Low Restricted I denied network to a CCP Editor entry.