Short answer is, you can’t. There’s no way at the moment to negate redirect rules. But I don’t think you need to negate rules, you could simply do something like:
/* /:splat 200 Cookie=is_dev /* /index.html 200!
This would work for anyone with cookie
is_dev to see the website and would only show the home page to others.