Do policies have something like a boolean "not" operator

Mostly, this can be done by switching between authorize_if/forbid_unless and so on. But that doesn’t work for the conditions.