I encountered the same issue. Our solution was providing the developers access to production in display only mode. If there where really issues in Production we have created a self developed firefighter solution. The developer can use this firefighter with wide access after the approval procedure and everythng is logged and monitored.
No debugging access in given in production except for the special firefighter.