There exists an ISettingControl that you can use for scenarios like that. For example in the next update to Form Wizard Pro we wanted to add a way to allow users who don't have edit rights to be able to review but not delete the form submissions. So we added a setting for the allowed roles:
<featureSetting
resourceFile="FormWizardResources"
grouNameKey="Permissions"
resourceKey="RolesThatCanViewSubmissions"
defaultValue=""
controlType="ISettingControl"
controlSrc="~/Controls/AllowedRolesSetting.ascx"
helpKey="sts-FormWizard-RolesThatCanViewSubmissions-help"
sortOrder="30000"
regexValidationExpression=""
/>
The control AllowedRolesSetting.ascx is part of mojoPortal and you can use it in your own custom features, and of course it is up to you what to implement with that data to protect your feature. The control just allows you to store the allowed roles as a module setting, it is up to you to implement use of it.
Hope that helps,
Joe