Can you try removing the permission using worklofw properties?
Haven't tried that for linking but it surely works for some other permissions. Worth a shot.
You don't restrict the property. You restrict the permission as mentioned in the above post. Something like:
If that doesn't work, try:
where some-group-one is a group that aready had linking permission but doesn't have any users in it or has only limited users like admins.
As I said before, I haven't tried this purticular example but it should work.
No, there's no way to do this.
If you wanted, you could investigate amending the core linking code to add such a check, but that's a lot of work (and I'm not sure the requirement is actually that useful - how do you link to duplicates or refer back to useful tickets?)