How do you disable UPNP on modern xfinity routers?

i have no port forwards manually set up. My router log shows the router upnp daemon gladly making holes in the firewall for any app that asks for it. How can i disable the upnp daemon so all port forwarding must be manually set up through the xFI app?