Possible to deny all permission changes inside a CIFS share?