> You cannot lock down development machines.

Of course you can. What makes you think you couldn't?