Oh, apparently you can do :not(.no-shield, .ve-ce-protectedNode-shield). Not sure if it's better or not :-)