I would like to restrict changes to objects and policies created from a firewall group, to protect them from local conflicts or accidental overrides. Objects and polices should be view-able but not editable when logged into the firewall locally, and it should be possible to pin firewall and NAT rules to the top or bottom, to better preserve the rule order.