Enable/disable Management UI from command line

It looks like you can't be set as using defaults if you want to remove HTTPS via "b self 1.1.1.1 allow tcp 443 delete"

So, I wonder if the best way isn't to manually edit the config file.

In bigip_base.conf, your self IP likely looks like this:

net self 1.1.1.1/24 {
    allow-service default
    vlan internal
}

The best thing to do might be to change it to this and then load the config file:

net self 1.1.1.1/24 {
    allow-service {
        ospf:any
        tcp:161
        tcp:22
        tcp:4353
        tcp:53
        udp:1026
        udp:161
        udp:4353
        udp:520
        udp:53
    }
    vlan internal
}