Limiting access to the Options screen would certainly do it.

A UI script might also work.  It would be a tricky script to write though... making a Sage field to be read-only is something I've had mixed success with.  After that, using an IsMember check could filter permissions by a named Role.

Thank you Kevin!