Category permissions for posts

I'm trying to set up access so that a Guest (the "stranger" level) does not have access to posts under a particular category. However, the Guest is still able to load a post under that category unless I specifically add a "Negative rule" for the individual posts which would be pretty tedious. Am I doing something wrong or not properly understanding how category access is supposed to work?