The hacky way that I do it now is to use CSS to hide the new DM button for all the non-staff users:
body:not(.staff) button.new-dm {
display: none;
}
Easily defeated by a person with the right knowledge (or who searches it here on Meta) but it may work for those who need something now before a disable option is more formally incorporated.