Prevent container from utilizing host networking

CentOS 7
Docker CE 18.03

I am trying to prevent users from running containers that can utilize the host network driver. I have used daemon.jason to set the default network to the bridge network driver but users can still manually run docker with the network set to host, eg docker run --network=host to override the settings. Is this possible? I see lots of info on how to control the bridge drive but not much on the host driver