In scenarios where you do not want a workstation or server to be rebooted, any rogue or untrained admin with rights could deploy something to the device without suppressing reboots.

Would it be possible to allow Maintenance Windows to be applied for reboots? This would allow admins to create collections of machines that would only reboot during a set schedule and ensure that the settings cannot be overridden by a deployment.

I could also see this being done via Client Settings, but that would be 24/7 not restricted to a maintenance window.