As it said, it is really impossible of out-of-box. But you can add ListAdding eventreceiver for the web and implement custom logic inside receiver, which will allow or deny list of library creating based on user group or role. http://msdn.microsoft.com/en-us/library/gg981880.aspx