I've run into some similar in the past. I went down the record producer route, allowing to create or remove records for choice list.  This also insured they only need to fill in their relevant information and the record producer took care of all the other needed record fields, in my case it was for sys_choice table. Then I locked down the record producer to the specific users.