Whenever a new Forge Component is installed using Service Studio, have the possibility of selecting a Lifetime Team to add the application to, or have a setting where a default Lifetime team is set to all components from the OutSystems Forge.
This will help granulate IT Users permissions on Lifetime, for instance, If one needs to allow IT Users to install Forge Components, but restrict the access to other applications.