Powershell scripts run while clients are in restricted execution mode?

I haven't tested Powershell scripting in a while via altiris/symantec/broadcom, but in the past (win7?), scripts would only run from console if we changed ScriptExecution to bypass (or signed).

Now in my testing with 8.5 RU3 and win10, scripts run even when clients report their script execution status is Restricted.

Was this a change in how the console is sending out the scripts I missed, or something unique in win10?  

Thanks for any info.