[Building Sakai] disable ability for instructors to enable BLTI tool from Lessons

[Keli Sato Amann]

Hello,
In the past, our developers had to enable BLTI tools, but it looks like Lessons allows instructors to enable and add new BLTI tools to a site on their own. We would like to disable this, as we are concerned that there may be tools created by third parties that are not responsible with student emails and info (FERPA/privacy concerns). We'd like to pre-vet tools that can be added by instructors.

There are two options for us. 
1) take out Add External Tools altogether. If instructor wants a blti tool, we can add for them, or add to tools list and they can add via Site Info
2) Change default permissions of Lessons tool so that only super users can enable new blti tools in systems, but instructors can add these tools once enabled from Lessons tool.

Are there advantages or disadvantages to either?

And out of curiousity, has anyone encountered this concern, or are we being ultra conservative?

Keli Amann
User Experience Specialist
Academic Computing Services, Stanford University