Got hook_profile2_form_alter working so that istc_role field is only accessible to users with "administer users" permission.