Anyway to manage snap security in Puppet or Ansible?

I understand how to install snaps from the commandline. I can do this with a system configuration tool. But my question is how do I disable certain snaps from being installed, how to prevent certain interfaces with snaps, and how can I orchestrate this? I’ve read articles on snapd security from the Ubuntu blog and snap core documentation, but neither appear to give me details on how to prevent the installation of snaps not whitelisted. Any ideas?