Can a global zone administrator prevent a non-global zone administrator from running the sendmail program?

A.
Yes, using pkgrm SUNWsndmr SUNWsndmu.
B.
Yes, using svcadm -Z zonename disable sendmail.
C.
Yes, using zlogin -l root zonename svcadm disable sendmail.
D.
No, the non-global zone administrator can install and run any program.