It’s surprising that permissions can’t be set to NOT ALLOW a user TOTAL access to Message Templates and Documents