* Do not patronise the user about advanced settings.  The user should
  know what she's doing.  ;)

* Hide the tabs page by moving it from .php to .inc -- web server acces
  to this file extensions is forbidden.  Tabs do not have authentication
  and that's bad if left untreated...