VMS Help SET, SECURITY, Qualifiers, /EXCLUDE  *Conan The Librarian (sorry for the slow response - running on an old VAX)

       /EXCLUDE=(filespec[,...])

    Excludes the specified files from the SET SECURITY operation.
    You can include a directory, but not a device, in the file
    specification. You cannot use relative version numbers to exclude
    a specific version.