Resource Governor question

[Richard]

It was suggested that I enable the Resource Governor to prevent any of
our adhoc power users from bringing the server to it's knees. If I'm
reading the documentation right you can use it to limit I/O, rows
returned, elapsed time, or tempdb pages, but not CPU. It also forces
you to name either the user OR the application that you want to
limit. I was hoping to set upper limits for any user from any
application. Is something like that possible. My concern is that a
power user could start using some new client application that the
Governor won't be configured for, so they won't be limited, or a new
power user gets added that isn't configured.

Thanks.