I don't believe that there are any settings within CAD that will block the saving of the username and extension. But as you said, the login information is stored in the agent.ini or phonedev.ini, depending on the version. You could create an Agent Management Workflow which launches a BAT file to replace this agent.ini/phonedev.ini file on agent logout.