Note that you need to bring the restored database up in restricted_user mode and make sure that no non-DBA's have sysadmin permissions; that way you can guarantee the data changes are complete before you put it into multi_user mode and others can get at the data.