On Wintel machines, turning off things like wifi/USB ports/optical drives/bluetooth/built in webcams at startup is as easy as going to the system BIOS and disabling them. How do you go about disabling these things in a similar fashion (not just turning them off inside of OS X, but having them be off by default regardless of which OS one boots into) on an Intel Mac? I know they don't have BIOS, but there must be some way to do similar things with the EFI.