Am not sure if you can deny access to sftp while allowing access through ssh. sftp runs as a subsystem of ssh. Also I don't really understand the benefits of restricting access to sftp. What exactly are you trying to achieve ?