Disabling CDE for security reasons - How to?

Hello,
In general I don't use GUI in Solaris 10.
So I usually issue:

# /usr/dt/bin/dtconfig -d

But I've noticed that it doesn't disable all cde services:

disabled       Jan_23   svc:/application/graphical-login/cde-login:default
disabled       Jan_23   svc:/network/cde-spc:default
online         Jan_23   svc:/network/rpc/cde-ttdbserver:tcp
online         Jan_23   svc:/network/rpc/cde-calendar-manager:default
online         Jan_23   svc:/application/cde-printinfo:default

I'm still able to launch graphical apps via ssh -X, such as gedit, even after disabling the 3 remainder services.

A security team then stated that CDE should be checked anyway:

"The CDE Subprocess Control Server daemon (dtspcd) is running on this system.