If you REALLY want to you can limit the powers of the sudo command. It's actually quite versatile if you don't mind getting your "hands" dirty in the config files.