Also know a workflow or script to restrict that field could help, but hoping there's a permission setting instead.