Limiting the keymaster ? Keymaster should be able to manage the whole system, so I would not touch that one. Think more of creating a new role like ‘myKeymaster’ and give the capabilities that you want: https://codex.bbpress.org/custom-capabilities/
Pascal.
