Add option to lock hostobjects in a folder from change or deletion

We like to ask for an option to lock hostobjects in a folder from deletion or change. The rights to lock/unlock must be limited to a certain role.

The actual access rights management on folder level is quite unhandy and not sufficient.