You could (and should) run with minimal permissions which would exclude DDL.