Some deliverables should be a hard "Required" for all engagements, such as Risk or Legal internal deliverables. Regardless of user permissions to be compliant we should not be able to delete these. We can then have "Recommended" deliverables, and "Optional" deliverables.