We already advise people in permissions to not give those two powers to any role.