The new 7.0 feature to disable global scripts with EnableGlobalScripts=0 is helpful but too basic.

We need more control, like the Zabbix agent’s AllowKey and DenyKey, to restrict specific commands. Users rarely need to disable all scripts; they just want to limit certain commands that might expose or damage the system.

Here is just an idea. A different approach would be more useful. For example:
A feature that allows only users with a special password key to add or execute scripts would be much better for management.