Ability to add devices into an exclusion setting. Maybe something similar to Ignore Client IP Address Setting. If a device is in this exclusion, it is excluded from getting scripts, managed installs, and patching. Should be able to select what type to be excluded from.