Force submit for review – while maintaining all other rights

How do I allow a Contributor role to password word protect a post (OR) allow a Author role to only Submit for Review?

We looking for a user role that has all the abilities of the Author – but can only submit for review. If I take remove the publish right from Author the ability to apply a post password disappears.

Thanks in advance!