Remove the trust_level_0 and using the plus sign, add trust_level_1, trust_level_2, trust_level_3, (... etc). These groups may post without pre-approval. Because TL0 is not in these groups, all posts require approval.
Do the same for approve new topics unless allowed in groups. A TL0 cannot create a new topic without approval.