The only mechanic i know that can be possibly copied is the mechanic from the DCD.
Every host attribute set from the DCD is automatically locked for manual edit.
But i think it is only valid for host attributes and not complete hosts.
For complete hosts i also only know the method mentioned with the locking of complete folders/subfolders from the .mk files.