> which is a foolish mistake

Why do you think it is mistake?

How do we provide org / ops determined configuration that users and agents cannot change while still giving them some flexibility to set the values we do not determine?