Currently, we can create requester groups and have a service item be visible only to them.
However, we are currently utilizing the "Roles" requester attribute to create the requester groups and with hundreds of different roles and for certain scenarios, it would be quicker to make a small requester group to be excluded from being able to see a service item rather than creating a huge group with all the roles minus a few that can.
