Default Number of Rule Groups

On shows that rely heavily on using the secure device to manage permissions I find myself often using 2 rule groups, one for system commissioning that I want to hide from everyone except the Admin and maybe the maintenance account and one for show specific rules that the for the maintenance or operator level might need to bypass on occasion.  And with the push to use the secure device on more jobs I think it would be handy if 2 groups were automatically generated whenever a new device was generated.