Allow `manage` minus `destroy` or minus some specific actions?

[andrewculver]

What I think should be valid examples:

editor:
  models:
    project:
      - manage
      - not: destroy

editor:
  models:
    project:
      - manage
      - not: 
        - destroy