Protect the PROM or the BIOS.
See "How to Protect Machine Hardware" if you are unfamiliar with the steps.
Limit contact with other workstations when booting.
See the explanation and reference in "How to Limit Contact During Booting".