Craft Lockout
From Juniper Clue
set chassis craft-lockout
For the EX series, unless you include these anyone with physical access to your router will be able to cause mischief:
set chassis lcd fpc 0 maintenance-menu disable set chassis lcd fpc 1 maintenance-menu disable [etc]