If you’re using a CT-xxx or any similar thermostat you can use our recently updated DTH to lock your controls remotely.
Now keep in mind that this allows you to lock your controls remotely (either partially or fully), however the user can forcefully unlock the controls from the device (if they know how to unlock it from the menu options, it isn’t straight forward but it can be done).
If you’re using CoRE/webCoRE then you can create rule to notify you if the user has ‘unlocked’ the controls by checking the lockControls attribute for any changes and trigger a rule to relock it after notifying you.