You agree on a very explicit set of deliverables upfront. Whenever the client attempts feature creep simply tell them that it's gonna cost extra time for you and extra money for them. If they persist give them a quote for it.