Because Box's access rights are waterfall, access rights set at a higher level cannot be removed from lower levels.
Instead of removing access rights, I want to set a password for the folder to limit who can access it.