What's the story behind the maemo folks not including this option in OS2008? They'd only have to use the device themselves for 24 hours before realizing locking down the applets is a must have feature. Just one of many things about maemo that scream "the developers do not use this device/OS outside of their office."