Securing VM settings

I have secured my Parallels VM using prlctl --password-to-edit functionality. So far so good as the user interface now shows a password and the user cannot change any settings.
Using the command line however, prlctl does not ask for a password when changes to the vm (e.g. deleting snapshots, setting auto compression) is being made.
I want to secure the vm in a way, so that no changes are possible without entering a password (using prlctl and also parallels control center).