lock mikrotik

/system routerboard settings set protected-routerboot=enabled
/system routerboard settings set boot-device=nand-only
/system routerboard settings set enable-jumper-reset=no
/system routerboard settings set reformat-hold-button=00:05:00
/system routerboard settings set reformat-hold-button-max=10m