I know that it is possible to protect SYSMAIN and MAINUSER using NSC, the problem is, how to allow the users use SYSMAIN for any library but not for one specific. As far as I know, I can protect a different groups to use SYSMAIN, but I think it is not possible to protect only ONE library to be copied, moved etc…
Think: you have the LIB1,and NOONE can MOVE, COPY, RENAME, DELETE, IMPORT to this library, but you can allow the user to use SYSMAIN in any other libraries.
It seems, you can protect everything, or not.
Please, let me know if it is right, if no, please, let me know how can I protect ONLY the LIB1.