You may have noticed that currently there is no way of managing what Active Roles services are available for powershell/AR Management Shell connections. You can select specific services to connect too, but not completely disable a specific service from being accessed via the AR Management Shell.
This is by design. An enhancement request (TF00756069) has been created detailing the feature above.
The product team will evaluate the request and this feature may become available on a future release of the product.
Please refer to this article for updates or contact support referencing the Enhancement Request ID: TF00756069.