[keycloak-user] Disable CORS on realm endpoints?

Hi all, Is there a configuration setting which will disable CORS at the endpoint url: <server>/auth/realms/<valid realm> ? CORS is on by default here, but is not needed for our application and causes false positives in pen testing. Any help would be gratefully received! Thanks Joe