To be clear, Anope can not "disable" any ircd command, it can only react by removing usermodes that the ircd requires to perform the command and can only do so while Anope is connected to the network. The example here is /sa* requires umode +a which Anope can be configured to remove from non-services admins thus preventing the usage of those commands for those users. However, the commands are still very much enabled. Think of it as having a room full of people with a new car in the driveway. While those that do not have the key may not drive it, the car is still very much drivable by those that do. So not having the key doesn't disable the car, just a persons ability to use it.
Additionally, there is no need for Ryu to be listed as an admin and root.
-OperServ- * ROOT Ryu
-OperServ- * ADMN Ryu
This causes Ryu to receive double the notices, memos and other weird things. Ryu should be removed from the services admin list since root is of higher access.