You cannot send the *67 out a PRI or at least I have never been able to do so. This whole issue depends on where the CLID comes from. If it's an analog port, the CLID comes from the serving providers switch and sending the *67 route pattern probably will work since that is a code given to all analog lines to block CLID. However, if the gateway is a PRI, the CLID can be affected many places, at the DN, at the RP, on the Gateway, at the service provider, etc.
So assuming that you can affect the final CLID from a Translation Pattern, that is where I would block it. Make it like *67.XXXXXXXXXX then inside for the Calling Line ID Presentation option put it to Restricted. Then do the rest of the Translations as what ever you need for your dialing pattern, discard PreDot, prefix '9', etc.