A system wide configuration of GpgOL is currently problematic because the users configuration entries overrule the system wide "defaults".
My idea was that an appended exclamation mark after a setting (as we only use string values anyway) would mark this similar to kleopatras immutable flags as a setting the user cannot change. This mostly requires respecting this in the configuration dialog to grey out such options.