As we use SFTP by default, and SCP is considered insecure, we may want to disable it totally. As scp utility doesn't use the system-wide config, we suggest implementing it via the kill switch file. https://github.com/openssh/openssh-portable/pull/271 is the PR to add this feature.