The target strings only work when you're trying to target players. The group argument is a string -- so, I think "^ admin" ought to work. You'll need to apply that permission to the user themselves, not to the admin group, since they'll lose the permission when they leave the admin group.