Forbidden Rules

Is there any way to forbid certain rules?

For example, it seems like a bad idea to create a rule to automatically allow elevated command prompts, since malware could take advantage of that and then run any code it wanted as admin. When we installed AE on our internal systems, the first rules my techs created were for cmd.exe and WindowsTerminal.exe. 🤦‍♂️

Is there a way to forbid "allow" rules from being created for specific applications? I don't want to deny the elevation of the application in all cases, I just don't ever want to automatically allow.