Raising this on behalf of clients. Now users can only generate or refresh the link, but can not disable or remove it.