@{$exceptions{$user}||[]}

Ah, that looks like a better answer.

But I suspect...

Your suspicion detection algorithm is faulty. That expression is returned from a subroutine. No larger context.