Change management issue

Change management issue

We are having an issue with change management after upgrading to 15140 (from 14860).
Some background:
We have set up four templates (+ 1 emergency template) with different role assignments and workflows. For one of the templates we have created a secondary change manager (CM2) role with full access to the change. This is done to make sure these changes always have a CM.
In the template FaFR we also lock down certain fields for non-CM users to avoid errors in change registrations.
On 14860 we could lock down all fields we wanted for "All Users" but the CM could still access them because the rules didn't apply to them somehow.
After upgrading, the FaFR we set up started applying to CMs also. I also noticed a new option in FaFR "Applies to Users (Except CM/CO/SDCM)". Changing to this option for some of the rules solved the issue for the CMs, but the CM2 role still hasn't full access to the change, the rules still applies to the CM2 role.

So the question is: How do we solve this so the CM2 also has unrestricted access to the change? Without unlocking all fields for other users also.
Also: The regarding the option "Applies to Users (Except CM/CO/SDCM)".
What does "SDCM" mean? CM=Change manager and CO=Change owner (I guess)? I haven't heard of "SDCM" before and can't find it referenced anywhere else.
2:nd Also: While troubleshooting I found this setting in Customization -> Change Management -> Change Cofigurations: "Change Owner can be Change Governor". What does Change Governor mean? Never heard of that term before.

                  New to ADSelfService Plus?