Add `LOCK_ITEMS` configuration?

This would prevent that devices are deleted or added, but could still be updated.

Usecase: 
locked down installation in a conference room, but somehow a user gained access to the admin ui.
He cant delete items, So the instance is still functional.

"Read Only" mode so to say.