Securing Drill/Select in 9.0

I'm trying to allow a select, but secure the drill explorer capability on a form. Specifically, we want our hospital campus security department to update vehicle information on PA17.1. I want them to be able to click on the gray down arrow in order to select on Company and Employee field. I've removed the FICA number from display on the form and display on the Select screens. But in allowing the select, it opens up the "world" if they right-click and drill. Is there any way to allow Select, but disable Drill?? The only way that I've found is to open up each called table and write a whole bunch of DENY rules - one for every field except the more general information ones like name. What I'm concerned about is when I add the Self-Service role to the user will the move permissive Self-Service rules override the DENY rules I create at the table level.