Remove ability to add VM's to distributed port group for VMKernel traffic

Hey,

I'm trying to remove the capability to add VM's to my distributed port groups that I want to use solely for VMKernel type traffic:

Anyone know how to do this?  Looked around all the settings and documentation but can't find the way.

Guy