diff --git a/tools/creating-new-drutopia-site.md b/tools/creating-new-drutopia-site.md
index e70fab0..b0456ab 100644
--- a/tools/creating-new-drutopia-site.md
+++ b/tools/creating-new-drutopia-site.md
@@ -100,7 +100,13 @@ Drutopia releases will expect the configuration in `$project_root/config/sync`.
 $settings['config_sync_directory'] = '../config/sync';
 ```
 
-(This should be updated to use a distribution-wide settings.php when we have that.)
+While in `web/sites/default/settings.php` also prevent site administrators being told they can install new modules when they can't and add:
+
+```php
+$conf['allow_authorize_operations'] = FALSE;
+```
+
+(All this should be updated to use a distribution-wide settings.php when we have that.)
 
 Once you also have a working Drush installation and a live instance, you can then aquire and export the initial configuration with: