RC rights, R overwriting RW

[DustyPorViva]

Okay, so a lot of people just give NAT's rights to like:

rw WEAPONS/*
rw WEAPONS/*/*

and so on. That's all well and dandy... but what if you want them to have full rights to everything BUT a few selected weapons? Instead of giving them rights to EVERY NPC instead of the few you don't want them to have, and basically giving them no rights to create NPC's... maybe have it that adding something like:

r WEAPONS/Prohibited/*

Will overwrite RW and let them read it, but not be able to change it. Please?