Alex, as security administrator, is responsible for controlling who can create secure objects. When developers are done creating secure objects, Alex revokes their authority on the database.
REVOKE CREATE_SECURE_OBJECT ON DATABASE FROM USER PAUL;
If Paul must create secure objects in the future, he must speak to Alex to have the create authority granted again.