On the Team page, the owner can tick "Creates templates" for a member or an agent. They can then create templates through the API and edit only their own, nothing else: no approving, no publishing, no touching other templates. Every template is now checked when it is saved: it can carry html, css and images, never scripts. Files an agent uploads go to cloud storage, and logos for designs can be uploaded too.