I believe you can put in a server level trigger, but this should not be relied upon.

By the way, situations like this is one reason some folks put development in a separate AD domain and ensure that the development credentials don't have access to production, just as Jeff said. If they are in a separate forest and production does not trust development and there is no forest-level trust, you ensure that if you are using your development account there is NO way of crossing that barrier.