Feature request: exclude files in read-only forward mode

[DCsunset]

Currently, the -exclude and -exclude-wildcard options only support reverse mode. But I think it also makes sense in the read-only forward mode as no files could be changed.

A typical use case is to decrypt only necessary files in an encrypted directory to protect other unused secrets. Although you can achieve this by creating multiple encrypted directory, it is harder to manage them.