simply giving a user the option to do advanced stuff that can break things is enough to guarantee someone will mess something up without knowing any better
i dont think its necessary to completely lock things down - just do whatever is possible to prevent a clueless user from fucking up during installation