How can we limit access to reports residing in delivered (out of the box) folders?

Summary:

How can we limit access to reports residing in delivered folders? Most of the users have access to BI roles (Consumer/Author/Admin) inherited through other roles or through direct assignment. However, we want users to run reports from custom folders and not from standard folders. How to stop it systematically?

Content (required):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):