Protect CVSROOT folder in repository against checkouts

[Andy]

Is there any way to prevent non-administrative CVS users from checking
out a repository's CVSROOT folder (and its tree)?  I want to remove
any opportunity from regular users accidently corrupting this folder.

thanks, Andy