Shortcodes are content, equivalent to any other text in the content. There is no way to allow one user to add a shortcode while disallowing another. 

The only thing that is possible to do is to try to remove any UI the shortcodes have to "hide" it, but in the end the only true solution is to manually approve every content submitted by a non trusted user, and not to give them the option of editing it after it is approved.