Can you disable drush pm-update for a site? Can you disable drush pm-update for a particular site in drushrc.php?

I have a server which houses the DEV and LIVE versions of the site.  Work is done directly on the DEV site.  Changes to the LIVE site are deployed via git pull from a shared remote on the same filesystem.

In an effort to prevent Doing Something Stupid&trade;, and running a pm-update and pm-updatecode on the LIVE site, I would like to disable these commands for that site.

The $command_specific[] syntax allows you to specify persistent options for commands (like --no-core), but I would like to fully disable pm-update and pm-updatecode for this particular site.

Is this possible?
You can disable the core Update module on the live site,  and then should prevent being able run pm-update on live:


  $ drush pm-disable update The following extensions will be
  disabled: update Do you really want to continue? (y/n): y
  update was disabled successfully. [ok] $ drush pm-update
  Command pm-update needs the following modules installed/enabled to
  run: update. [error] The drush command 'pm-update' could not be
  executed. [error]