Is there a simple way to disable ssh in Photon 3 OVA?

I’m running a couple DNS slaves using NSD, and have no need for SSH to be enabled, especially when the OVA enables root login by default (I know I can disable that.)

Seems that disabling SSH would be a great security measure, as most systems have it disabled by default.

I guess I could add the stop command to a new service, but would like to do it properly.

I would prefer not to do it through iptables as there are some times it is handy to use SSH instead of the remote console access in VMware, but then I could enable for that session.

thank you,

Mike