App Distribution Sandbox?

Hi, we have many developers on team and some have admin status. We are having problem of users accidentally deleting other members certificates. Is there a way to create a sandbox that controls who can delete what certificate? Or is the solution to allocate only one admin and let them better manage certs.