Give administrators the option to prevent users from viewing hidden objects. This could be done by adding a task to the role options. this task could be called View Hidden Objects. Then the administrator could select/deselect the permission based on role.