Disabling CLI commands

Is it possible to disable cli commands in ipfs?

To put this into context, suppose I want to create a private IPFS cluster where peers should only be allowed to retrieve data from the network and not add anything. Besides providing a modifying version of ipfs, is there any way to enable/disable cli commands?