Make updates forbidden by default