How to disable dynamic client registration?

Keycloak advertises the dynamic client registration endpoint in .well-known/openid-configuration - how can I turn that off entirely?

Scoured through the docs, but didn’t see much on this.