Adding the exclude field would allow organizations of larger size to implement RBAC policies for members of leadership that "target" all employees (everyone), and then allow for other members of the leadership team to be Excluded from the targets list.