How to create a role without some permissions an "Authenticated User" has?
I don't think you can do that. The authenticated is the mimialist role with the lowest permissions.

You give it the Minimal permissions then make other roles with added permissions to the authenticated.