This is one way.
As for the power rating of the resistor, 99% of the time, 25W will be fine. If you don't leave the amp turned on when you're not using it, then this is just a failsafe for that one time you forget to turn it off. If you never crank your amp up to 10, then 25W should be ok. I'm a big believer in over-engineering stuff that's not for mass production, so for the cost of one extra resistor, I'd go ahead and use two 15 ohm 25W resistors in parallel. Then you're covered for 50W and you don't have to worry about that 1% of the time when you're distracted and forget to turn off the amp. You can even leave it on if you plan on switching back and forth, which will save some thermal stress on the tubes.
In principle, you should heat sink the resistors. Just attaching them to a metal enclosure should do the trick. If you use the parallel resistors, then the heat sink probably isn't necessary.