That's probably the best way to "lock down" a machine while also keeping it in use after the manufacturer decides that it's not worth their time to support. Lock it down for most people, but unlock it for those who know what they're doing.