In production: remove the Install button and lock down install.php.