Coreboot configuration utility
You can disable the ME directly in the coreboot build. This worked for me. However, after positive experiments with that, I went on and used me_cleaner.py to reduce the size of the ME from 5MB to 84kB. It will run the board Bring-Up (BUP) and then go to the "disabled" state, as usual with the Alt-ME Bit being set.