What you could do is set a PIN# or password on the SIM cards on newly deployed devices, provided of course that you have access to the devices before hand.
The following link describes the approach
http://www.blackberry.com/knowledgec...32312&vernum=7
This might be a little more cumbersome to put in place though.