Creating a record with a single security group

I have a user who is a member of multiple security group, and I want any new records that user creates to only be attached to the security group flagged as primary, and no other groups attached.
This is to safeguard commercial confidentiality on certain records,
Is there any way to do this?

within the security settings, you can at least configure that users should pick a security group in case their profile is related to multiple groups.
Otherwise, you could create your own logic hook that dynamically relates the proper security group of your choosing.

I have been through the documentation several times, but can’t see any setting that covers this?