[Zope] disable WebDAV and XML-RPC?

Howdy! Following the "deny everything that isn't explicitly allowed" policy I'd like to disable WebDAV and XML-RPC access to Zope. Is ist possible to disable them in Zope or do I have to catch the requests before they reach Zope? Ragnar