Service Principal - conditional access

Hi All,

Recently Microsoft has announced workload identities preview feature in conditional access policies. If I don't want a Service principal to be used interactively, can I block it using this new feature? I still need the SPN to be used by the app though just dont want anyone to use it interactively.

Thanks

AR