Is there a way to make this off by default so every user has to activate it by themselves?

You could not grant the permission, else set the default delay to something very high.

yeah that works, thank you