Is it possible to prevent users adding external accounts in the webclient?

I've unchecked "External POP/IMAP access" in the CoS but it only disabled external POP access, it is still possible to add external IMAP accounts.

Have I missed something obvious?