Currently, there's no way to restrict staff users from Adding, Editing, or Deleting "Messages" in the circulation module. There are situations where you don't want circ staff creating or managing messages. (Note that Koha already has a "manage_checkout_notes" permission.)