Restricting a Task Sequence to Certain Users

My goal is to advertise a OSD task sequence to all workstations in such a way that standard users do not see it in Run Advertised Programs, but someone with elevated rights could do a Run-As on Run Advertised Programs and have the task available to them.  Is this possible and if so, how?

The ultimate objective is to make OSD available from Run Advertised programs, but prevent users from accidently wiping their machines.  If the above will not work, what are my other options?

Thanks!