There're two problems with this feature now:
1. We detect EV certificate when connection is already established. So when we decide that the website should not be filtered, the only option we have is to drop the current connection and do not filter it in future.
That could be ok if we didn't have the second issue:
2. The list of SSL exceptions is cleared on every AG restart so user goes through point 1 issue again.
We'll address either first or second issue in the next major release.