Add a item to the configuration files such as view_risk_scores or use_risk_scores to indicate whether the app should show/utilize risk scores.
This implementation should probably store the value somewhere in the application and allow changes by an admin or other appropriate role.