kinda an older thread, but is this any thing like the "Can manage all contacts" Permissions for users and groups... I have v1.7.3.1
If so, I don't select it for any users OR groups minus Super Admins (what I like to call as I have a 2nd admin account minus the Can manage all contacts function)
I then, if need be, add the contact to the clients company of a 'lead' person that will be a contact for us.