Option for deny editing on specific nodes

Thanks @minnoce - this should be activated on the single nodes then?

I'll review the MR once ready, but I guess we should then put the functionality into a dedicated submodule or allow to enable it per entity type / bundle.

No activity yet, if nobody implements this, we should close it won't fix sooner or later. Doesn't seem to be important enough?