We should be able to turn off the whole app with a message, or maybe to set it readonly, only via an env var.