Make NFTs non-transferable using the PermanentFreezeDelegate plugin:
await create(umi, {
asset,
name: 'Credential',
plugins: [
{
type: 'PermanentFreezeDelegate',
frozen: true,
authority: { type: 'UpdateAuthority' },
},
],
}).sendAndConfirm(umi);