If you're comfortable, i would update the ootb delete acl and remove the template_editor role (because it contains itil) and replace with admin or another role that does not include itil. That way the new acl you created above will be the only one that allows them to delete (their own).