You can create an static baseline that not include these patches you don't want to install. I think is the only "easy" way.
Marcelo Soares
VMWare Certified Professional 310/410
Virtualization Tech Master
Globant Argentina
Consider awarding points for "helpful" and/or "correct" answers.