Permanently prevents new attachments before closing remote and shared sessions, including when later cleanup fails.