Since the #halosEnabled preference has been removed it is now more difficult to lock an image down for deployment as halos are now always available via shift-blue-button...
Regards, Gary