you need to prevent members of a local group from starting a specific