lock changes to settings in the domain-server master config file