Would :not(.no-shield .ve-ce-protectedNode-shield) work?