XMod is awesome... but, I've run into a number of cases where we want to give add/edit permission for the same template/form combo to different groups of people.
For us, this happens because we'll have area-specific sub-administrators who can edit some areas of their group's site... A bit like a group owner in the new DNN social system.
DNN has a great way to do that - I can give edit permission on a module to some security group. Going further, developers can create custom permissions that can still be set through DNN's permissions framework - like the HTML module does in the pro version of DNN.
XMod should have a way to use those permissions so that new templates aren't needed for every case. To preserve the current security model, just make an entry for the list of EditRoles (and the others) that specifies that permissions should be inherited.
For example, if I could do EditRoles="(Inherit),Administrators", then the records would be editable by administrators or anybody who has edit permission on the module. This way, the host account that creates the template could keep allow/disallow that inheritance as needed.