Main reason being I don't want the data to be copied from the database to their local machines.
You cannot stop it being copied to their local machine, you can only make it difficult. And really not that difficult.
Trust but verify - i.e., use something like pg_audit.
David J.