An admin switch to disable new agent installs

Would like a switch in Admin to allow/disallow new agents. I can turn it on when I know I am setting up new PCs, then turn it off again until next time. This prevents random new PCs from appearing in the Access lists, for example, when AV scanners test the SC executable on dummy PCs.