Fls: howto grant access to all fields except those starting with 'sec'

This is a question regarding field level security.
What is the best way to grant access to a role for all fields within an index (even upcoming) except fields, where the name of the field starts with 'sec'?

I already tried:
...
fields:
- '/[^s][^e][^c].*/'

but it didn't work.

Hi Martin,

Currently we do not support regexes for field level security. Fields that a user should see need to be specified in the list of allowed fields per role (wildcard patterns are allowed).