You could just lock down scanning to anyone who is not logged into the copier. (You would need to create accounts for them to do so, and of course change the admin credentials so that nobody could just use that account, which in turn would mean you are the only one who can troubleshoot the device as admin.)
You cannot lock down what templates appear though