Take a look at Apache's documentation of the AllowOverride and Options directives.

Set the directory's options then don't let the user override them.