[MERGED PR] Restrict monkey vendor access

[jckrfc03]

its better to monkey clone some antags instead of borging them, giving sec monkey vendor access would let security ensure that the antag is monkey cloned and not borged by a roboticist that sees a spare brain on the floor.