Globally disable monlist in all the ntp.conf variations to protect against use of monlist to launch UDP-based DoS attacks. This was probably already prevented by firewall rules, but may as well make sure.