I am trying to restrict a role to only creating Distribution groups, not security.  I can create a template but they still have the "system template" which allows them to select Security for group type.  How can I restrict access to the System template or another way of disallowing the ability to select the security group type?