Hello,
You can specify what's available to specific accounts by going to WHM>>Packages>>Feature Manager>>Edit Feature List and then assigning that featurelist to a package. If you want to disable AutoSSL you'd deselect AutoSSL in the feature list.
Once that's done you can go to WHM>>SSL/TLS>>Manage AutoSSL and select "Reset to Feature List Setting" for all accounts