As others have said, heavy water reactors, such as those at the Savannah River Site, (www.srs.gov) run on non-enriched uranium, and they do produce plutonium. The good news, however, is that it takes an enormous facility to separate the plutonium from the other highly radioactive by-products, and such a facility would be difficult to hide.
All nuclear reactors produce plutonium, light water or heavy water. A significant percentage of the heat from a light water reactor comes from plutonium fission, in fact. The Canadian CANDU heavy water design, however, allows fuel to by cycled through the reactor without shutting it down, so you can pull out the hot fuel before the plutonium is burned up - the Indian nuclear bomb came from a Canadian-supplied reactor as I recall.