Read-Only User

If I want to allow a user to log in and read past direct messages but not post anything, what is the most expedient way to do that?

'Disallow posts from federating' seems promising as a partial solution, but searching suggests it's not actually implemented?