Add the ability to negate matches for the daemon's "refuse options".