The built in security groups are decent, but we would really benefit with a way to lock down certain components "write" access, such as the "Overview" section, specific KB folders (similar to how Passwords have group access permissions), and/or People having a global section vs client specific.