I just want some users not to be able to create Host Pass links. This is a security issue. There is an extension that removes Host Pass, but that is to remove it overall for all users. I need it just for some users with specific roles. 

How about option 3: "Restrict the ability to use the host pass feature based on role (role-based permission)".

Is that something that is still on the roadmap?