Are Cisco SPA-504G phones supported in any CME versions?

I'm trying to enable SSH-only access to a Cisco 4006 running CAT OS 8.4(11)GLX with local authentication. SSH works fine, but telnet access is still available. How can I disable telnet access?

I have a customer who is using Desktop Utility to gain wireless access using 802.1g. Client is set to use static username/password for physical network access, then windows user/password for further access. Client get prompted for network username/...