Depends on the situation, but if this is in-house and you aren't sending the SP out to anyone then just grant execute rights on it. If you don't want sysadmins to see the SP either then I'm not sure that it is possible.