Mechanisms exist to configure systems to prevent the installation of software, unless the action is performed by a privileged user or service.