If it were me, I’d have New Services Mode on my prod cluster(s) set to Protect.