Register package services on hosted shared desktops

HI all,

I have a question about registering package on a hosted shared desktop.

In my view there are three ways to register a thinapp package:

1. Use a script to cycle through ThinApp package folders and use thinreg to register the packages where users have acces (NTFS).
2. Use the MSI created during the build.
3. Publish shortcuts to the entry points in the bin folder.

I prefer scenario 1, but I have one thing that isn't clear:

In the ThinApp manual it states that ThinReg.exe /allusers needs to be used if packages have services. On a hosted desktop this isn't useable because everyone sees the package shortcuts. Offcourse users without permission can't start it because they don't have access to thr package contents but the shortcuts are visible, right? if so, how to overcome this issue?