Brian since the template and tags are metadata related I don't believe the security is granular enough to accomplish what you are trying to do.

With that said you might be able to do something like the following...

Create a field on the template for those documents that the end user can see but not edit. You can do this by clicking on the field and selecting the security button.

Then set the default value for the field something like "secure".

The user rights for this person never changes in this scenario because we can setup a workflow to confirm that the tag is always reapplied if removed.  It would look like this...

Now to have your workflow see that security tag you will need what ever user you are using in your profile to be able to assign that tag.

So in my case "admin" needs the right to assign that tag.

Now if you really want to have some fun you could also setup an email to tell you that someone tried to remove the tag.

Your starting rule would look something like this...

Pretty sure this would do the trick for you.  If this helped you please upvote, if this works for you please select my post as the answer.

John