You could probably create on INPUT events to block it, but then if a user realised that /debug wasn't working it wouldn't be hard to figure out that your script was blocking it. At which point they'd probably delete your script for trying to stop them accessing commands, which is highly suspicious in general.
