[Wlug] lock down /etc

Not sure if anyone has experience with this, but I would like to lock down the /etc directory so common users cannot run through the directory and read all the files. However, programs still need to be able to read the files to work. I'm trying to do this because we have several users on our system that like to peruse the files within /etc. Anyone have any suggestions? Thanks for your help, Justin