negation is currently not implemented - but in most cases you can just use priorities to get to the desired result
e.g. 'modify subject for everybody except 'who object X' - create two rules - one with From 'who object X' and action accept, one (with lower priority) without who object and Action Modify subject