Extra layer of security for some restricted items

[lsat12357]

Descriptive summary

A video with visibility:restricted was somehow flipped back to open. In cases where there may be legal or other concerns, what extra measures could be taken to ensure that the visibility of an item can't be changed accidentally?

possible solutions:
create an additional role/user that isn't used for anything else, set edit permissions to that role only
modify bulkrax so that it can't update restricted items; restricted items would only be editable in the GUI.

Expected behavior

Related work

Link to related tickets or prior related work here.

Accessibility Concerns

Add any information here to indicate any known or suspected accessibility issues for this ticket