Default [Q] Block OTA?

Now that we have root and s = off, what files do we need to rename/delete/freeze/otherwise mangle to prevent an OTA update from locking the phone down permanently like Samsung/Verizon/Google did with the Galaxy S3 and S4?

If they're the same files as the Samsung phones, I sure can't find 'em on my M8!