Add Plugin Guard feature to block plugin installation and activation unless an admin unlocks via Settings → Plugin Guard