Configuration to disable exec from the UI

[jamesdmorgan]

Proposal

Add configuration to disable exec into container functionality from the UI.

It feels like it ought to be disabled by default but I appreciate the functionality has been available for a while now.

Use-cases

We would like to enable this functionality in our testing environments but disable it in production.

Attempted Solutions

Its possible via ACLs but it would be much easier via configuration