Restrict SwitchLogonSession While Creating Host Pass

When creating a Host Pass the only options are to give same same permissions as the tech creating it or view-only. This gives the vendor (or whoever) access to backstage and command line/powershell without logging into windows. Can an option be added to restrict access to backstage?