Feature Request exclude passed controli ds from log

Currently it seems to be not possible to modify these powershell calls

```powershell
Get-AzSKSubscriptionSecurityStatus
Get-AzSKAzureServicesSecurityStatus  
```
to exlude all "passed" controls form the log. This would be very nice if i can set a parameter toexlude all control ids from log if they passed.