One possible approach would be to utilize the Powershell automation capabilities with DMT to place a bit of further restriction between your users and the DMT tool itself. We have set up network “Drop” folders with tight access restrictions where the User can save properly formatted files targeted at a specific DMT Transaction Type. This allowed the usage you describe without letting DMT Roam Wild so to speak.