Want to block user from publishing extensions

Hello All,

How can I block a user from publishing Extensions in cloud BC? As I found some super users are publishing extensions just to widen the column length. It might engage objects range. So I just want to block them from publishing extensions with other super permissions remains as it is. Is it possible? 

One more thing what D365 Extension MGT permission set does?

Thanks in Advance.