diff --git a/src/applications/config/option/PhabricatorCoreConfigOptions.php b/src/applications/config/option/PhabricatorCoreConfigOptions.php
--- a/src/applications/config/option/PhabricatorCoreConfigOptions.php
+++ b/src/applications/config/option/PhabricatorCoreConfigOptions.php
@@ -49,6 +49,7 @@
             'the correct domain.'))
         ->addExample('http://phabricator.example.com/', pht('Valid Setting')),
       $this->newOption('phabricator.production-uri', 'string', null)
+        ->setLocked(true)
         ->setSummary(
           pht('Primary install URI, for multi-environment installs.'))
         ->setDescription(
@@ -76,6 +77,7 @@
           "http://phabricator3.example.com/",
           pht('Valid Setting')),
       $this->newOption('phabricator.timezone', 'string', null)
+        ->setLocked(true)
         ->setSummary(
           pht('The timezone Phabricator should use.'))
         ->setDescription(
diff --git a/src/applications/config/option/PhabricatorDeveloperConfigOptions.php b/src/applications/config/option/PhabricatorDeveloperConfigOptions.php
--- a/src/applications/config/option/PhabricatorDeveloperConfigOptions.php
+++ b/src/applications/config/option/PhabricatorDeveloperConfigOptions.php
@@ -141,6 +141,7 @@
             "investigating performance issues, you can adjust the rate ".
             "in order to collect more data.")),
       $this->newOption('phabricator.developer-mode', 'bool', false)
+        ->setLocked(true)
         ->setBoolOptions(
           array(
             pht('Enable developer mode'),
@@ -153,6 +154,7 @@
               'error callouts) and forces disk reads of static assets on '.
               'every reload.')),
       $this->newOption('celerity.minify', 'bool', true)
+        ->setLocked(true)
         ->setBoolOptions(
           array(
             pht('Minify static resources.'),
@@ -165,6 +167,7 @@
             'should enable this in production, but disable it in '.
             'development.')),
       $this->newOption('cache.enable-deflate', 'bool', true)
+        ->setLocked(true)
         ->setBoolOptions(
           array(
             pht('Enable deflate compression'),
diff --git a/src/applications/config/option/PhabricatorNotificationConfigOptions.php b/src/applications/config/option/PhabricatorNotificationConfigOptions.php
--- a/src/applications/config/option/PhabricatorNotificationConfigOptions.php
+++ b/src/applications/config/option/PhabricatorNotificationConfigOptions.php
@@ -52,6 +52,7 @@
 
     return array(
       $this->newOption('notification.servers', $servers_type, array())
+        ->setLocked(true)
         ->setSummary(pht('Configure real-time notifications.'))
         ->setDescription($servers_help)
         ->addExample(
diff --git a/src/applications/config/option/PhabricatorSecurityConfigOptions.php b/src/applications/config/option/PhabricatorSecurityConfigOptions.php
--- a/src/applications/config/option/PhabricatorSecurityConfigOptions.php
+++ b/src/applications/config/option/PhabricatorSecurityConfigOptions.php
@@ -238,6 +238,7 @@
          'celerity.resource-hash',
          'string',
          'd9455ea150622ee044f7931dabfa52aa')
+        ->setLocked(true)
         ->setSummary(
           pht('An input to the hash function when building resource hashes.'))
         ->setDescription(