How to prevent new installations when I have already installed my client through LAN boot?

[Thomas Neumann]

>> +It is possible to remotely execute 'fai-chboot ...' on the fai
>> server to switch the installed client to localboot after the
>> installation has completed. Warning: This may open up the fai
>> installation environment to exploits if the remote login account
>> is not properly secured.

> Sorry to chime in here, but if you require this to be added, where
> would you stop?

Point taken. Too generic.

Warning: This allows any fai client to control all other clients' boot
settings if no additional hardening is performed.

Better?