Hmm - it appears from a simple test (on DALnet - other networks may be different) that you cannot have a user nick that starts with a "-".
/nick -abc
-abc Erroneous Nickname
If this is generally true, then as previously commented, such nicks will be system nicks and an explicit whitelist (which might need to be a combination of network and nick) could be the solution.
