It would be good (for anti-vandalism purposes) to be able to exclude more than one user using rcexcludeuser.
It would be even better (and perhaps also less of a performance issue?) to create a new parameter that allows entire user groups to be excluded.