When you want to exclude users from a holdout group using a targeting gate, the users should pass the targeting gate. The targeting gate is used to define the users who are included in the holdout group. Therefore, if a user passes the targeting gate, they are included in the holdout group.
If you want to exclude certain users, you would set up your targeting gate such that these users fail the gate. This will effectively exclude them from the holdout group.
In other words, you should create a gate that qualifies users to be in the holdout. If the gate evaluates to true for a user, they will be held out or excluded.
Remember, the key is to design your targeting gate in a way that the users you want to exclude will fail the gate, thus ensuring their exclusion from the holdout group.