Host pass security role

I have been trying out the Remote Workforce extension where I can assign computers and found out that anybody can do a "Get Host Pass" if they have console access.  I need the host pass for outside vendors for some roles but not all roles should have it.  So, having a get host pass role would fix this problem.