Prevent removal of profiles but allow install apps?

I understand that with the new profile manager, I'm able to remotely control iMacs. But the problem is local admin users will always have the right to remove profiles (even if I set it to be not allowed in the profile manager). I assume this is intended (because local admin have the highest level of rights) but the problem is we usually give admin access to all the users because they are developers and they have to install apps on a daily basis.

So the question is, how can we retain proper profile management but still allow for app installs?