is there a way to restrict commands passed to ssh (client) to override
command line options

i need to restrict PermitLocalCommand to 'no', even if specified 'yes'
on command line

man ssh_config says

ssh obtains configuration data from the following sources in the follow‐
ing order:
1. command-line options
2. user’s configuration file (~/.ssh/config)
3. system-wide configuration file (/etc/ssh/ssh_config)

so it looks like that /etc/ssh/ssh_config is overridden by command line
argument ssh -o PermitLocalCommand=yes someuser@somehost

thank You,