CGI problam, user can add 'AddHandler cgi-script .cgi .pl' running CGI?

[Jedia]

hello every, i have 3 CGI accounts and 30more NO CGI account on my server.
today i found one of the NO CGI account running the CGI program. i have not gave this account CGI access, but i found in the user homedir the .htaccess has this line:

AddHandler cgi-script .cgi .pl

this user can running CGI program now, but how to deny this account running CGI program please?
i set the httpd.conf

#AddHandler cgi-script .cgi .pl

and , CGI access accounts was like this:

<VirtualHost xxx>
......
Options -ExecCGI -Includes
ScriptAlias /cgi-bin /home/username/public_html/cgi-bin
.....
</VirtualHost>

and the NO CGI access accounts was likt this:

<VirtualHost xxx>
......
ScriptAlias /cgi-bin /home/username/public_html/cgi-bin
.....
</VirtualHost>

please, how to fix this problam? i need some account can running CGI program but some NOT.