<p><pre><code>  &gt;In my opinion there&#x27;s only one way to do this. Admins who are all powerful, and non-admins
</code></pre>
That&#x27;s the best way to do it when you can trust your admins, but it violates Sarbanes-Oxley. I&#x27;ve seen some places that literally have a chain-link fence with a pad-lock in their data centers to separate access. Obviously that&#x27;s suboptimal for efficiency purposes, but anyway.