Perhaps my blog post on locking down a task sequence to an AD security group will be of interest to you.
https://emeneye.wordpress.com/2018/01/08/lock-down-a-configmgr-task-sequence-to-an-active-directory-security-group/
I haven't tested it from the Software Centre but I imagine it wouldn't be difficult to adapt it to make it work.