use ajax to stop cms users from adding/removing settings they shouldn't