For an adhoc search, users can click Job -> edit job settings and change read permissions to "everyone". How can I restrict users from being able to do this?