Restricting profiles from viewing classes

Is there anyway to restrict users from not being able to see code (classes, triggers, etc) but still allow them to be able to get into setup / config to create workflow rules for example? The only way i can see to restrict them access is to remove the 'setup and configuration' option on a profile.

Thanks!