[Info-vax] Restrict the use of SUBMIT/USER= to one particular user.

[Joe]

We have a set of application users who submit some application batches on a specific user with the command SUBMIT/USER=APP$MGR. To perform this, the application users are provided with CMKRNL privilege. I notice at times some users use this privilege and submit some jobs under SYSTEM user. What would be the best way to restrict this? 
I'm thinking of a captive menu to get all the required details and validate the user part and then submit in the background, is this a good idea? 
Do we have any other option to restrict this easily?