Removing the Ability for a Worker (Standard License) to Create Proofs (but still load documents)

There used to be a way to keep Workers with Standard licenses from having the ability to create Proofs. I've been digging into the Proof Permissions...and unfortunately, I'm not able to get the functionality to work properly. We even created a custom Proof Permission called "Contributor" that actually matches the "Observer" (WF Native Proof Permission)...and according to Experience League it should behave accordingly:

Observer

Observers have the following permissions:

 Can see, review, and approve proofs of other users that are explicitly shared with them (Read-onlyrights to everything in a shared folder). For more information, see Manage Proof Roles in Workfront Proof.

 Can view files that are explicitly shared with them.

 Can view contacts and groups

 Cannot create proofs, upload files, and create folders. For more information, see Upload Files and Web Content to Workfront Proof.

 Cannot view, edit, or delete proofs and files created by other users in the organization.

 Cannot edit proofs or replies.

 Cannot delete any items created in the organization.

 Cannot access the Billing page or Account settings. For more information, see The Workfront Proof Billing Page and Account settings in Workfront Proof.

 Cannot be set as the Dropzone owner. For more information, see Configure the dropzone in Workfront Proof.

 Cannot empty the trash. For more information, see Restore and Empty the Trash in Workfront Proof.

 Cannot add, edit, or delete users.

 Cannot create groups or add new contacts.

 Cannot delete contacts.

You can see that this role should not allow the user to create proofs, but ALSO they would be kept from uploading files (which we don't want).   There doesn't seem to be a separation from the ability to load proofs and loading documents, but then also ability to View Proofs as well. 

When I log in as the test user (with Standard license and this new proof permission) I'm able to load a Proof, but I'm not able to create a Proof Workflow.  This functionally could have changed recently with the addition and transition to Unified Approvals.  

Interestingly, there is a Visitor Permission Profile, according to Experience League this role should not be able to do the following:

 Cannot create proofs, upload files, and create folders. For more information, see Upload Files and Web Content to Workfront Proof.

 Cannot view, edit, or delete proofs and files created by other users in the organization.

 Cannot edit proofs or replies.

To test, I logged in as another User who has the "Visitor" Proof Permission (keep in mind he also has a Contributor license and access).  I went to a project and was able to load a Document, but Proof was not an option. Additionally, I was able to view a Proofs (not created by this user)...so this contradicts what is posted on Experience League.  

Any direction would be appreciated...what am I missing?  Thank you!