Restrict `stoners` a little bit more

[obiwac]

Currently, there's a lot of stuff members of the stoners group can do which probably constitute as overreach (stuff like basically setting whichever devfs rules they like, etc).

Make a list of them here, and find solutions to them :)