Help Systems Robot Schedule...

We have been using Help Systems Robot Schedule for many years. But,
along came SOX and interrupted our tranquil life. Now I need to set up
Robot so that programmers and help desk personnel don't have access to
the jobs, and yet, can get their jobs done.

Primarily, this is because the profile being used by a job may have
(probably has) more authority than the person doing maintenance to the
job. That means that a person could add a command to the job to do
something nefarious - like deleting all the libraries - or something
like that.

I am wondering if anyone else has already gone through this exercise and
can give some guidelines that they ended up following. I have called
Help Systems, and they don't have anything more than their manual, as
far a instructions or methods go.

Thank you,

Dave