checkout read only-without setting watch

[pad_123]

Hi

Other than setting a watch, is there a way to make cvs checkout read 
only?
I want to make the admin files (in CVSROOT directory in the 
repository) to be checked out read only so that they will not be able 
to change them and commit them back. I think anonymous repositories 
implement this; I mean we can check out but not check in,right?Can 
anyone suggect how this can be done?

Thanks a lot,

Paddy Thomas