Not really because the client are thin-client so the server does not know which kind of client its is spoken to.
You could just not serve sao files by removing it from the [web] root but this does not prevent someone to still use it himself.
Oh I see, yes I tried to put a wrong path on root= and always got 405 error. But I thought a better solution could be possible, thanks for quick response!