How to disable the public/private network access to OSdisk of nodes in ARO or self managed OCP on Azure

Issue

• Whether it is possible to disable the public and or private network access mode to OSdisks of the cluster nodes hosted on ARO or self-managed?
• Is there any downtime required for this? Can this be achieved as day 1 operation i.e at the time installation?
• Organization's security auditor's are asking to disable the public and private access to OSdisks of the nodes of OCP.
• Is there any plan to have this as a day 1 operation in future release?