Exclude service label in global notification rules

It would be useful to have additional exclude conditions in global notification rules.

There is already functionality to “match service labels”, but there is no way to negate that, in case we want to have a notification rule that does not match a service label.

The use case here would be to excluding certain services from a notification using service labels.