Explicit deny group(s)

Is there a way to explicitly deny a group permissions to a given type?

The reason I ask is we have hundreds of Integrity Manager users and most of them are not in any group. I am creating a new type for several special groups, but this groups do not need to see any other type except this new tpye that I'm creating.

I know of no way to do this, except add all those other users in a new group and give them permission to the types they need.

Thanks,

Dan