A proper solution would be to get rid of the use of xp_cmdshell all together.
The recommended way using either a SQL Agent job or a web service that invokes the package. Both are decoupled from the caller, which is how it should be:
Loading and Running a Remote Package Programmatically
There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato