Ensure entities used as targets in engagements live in production cannot be changed.

While you have the permissions granular enough to limit those who can launch engagements into production, there are several areas that users can impact engagements already live in production without knowing. 
This is a very big concern for security. Updating segments, product mapper, and audience will directly impact any engagement that uses it with no approval process and without the permission to launch engagements to production. 

We need a way to ensure ANY impact to production engagements is controlled by the production launcher. 
In addition, with this, there is no way to test changes to segments or product mappings without risk to live engagements. We would have to create a copy of the targets and maybe the entire engagement (not sure, have to test) in order to make changes to the targets. This is a lot of additional work and risk.