The only setting is self-explanatory to enable or disable the module.
Yes, what this module does is sort-of possible via say ProtectedApps, but this module also checks if the current user is a "restricted profile" and will not affect any normal accounts. Perfect for handing a tablet to a toddler to avoid changing various settings. This makes the restricted profile more or less fool-proof as far as my testing goes.
Source code: https://github.com/sandos/restrictme