Secure Redirect policy is configured with the secureMailer sender exclusions as per the MG 5.0 Release Notes document.

Secure messages are sent, but the notifications containing the link to the mail itself are going to the Secure Mailbox and not to the regular Inbox.

To properly configure the policy and the secureMailer exclusion, you need to edit the Sender Definition Options from the "Message is sent from" link to "Custom" and make sure the "SMTP Envelope Sender" is selected.

Otherwise, the exclusion is not triggered at all since the secure message delivery notification appears to be sent by the original sender -  but in fact, the SMTP sender as well as the Return-Path, is a secureMailer system address.