External media is always considered untrusted by design. Therefore, impossible to exclude.
There has been some discussion that there really is no need for a blanket distrust situation if CIS is using file hashes to recognize files. So hopefully version 6 will no longer have this design restriction.