add this line to your server.cfg
set allow_download "0"