If the application doesn't use the system tables then application roles?

http://www.microsoft.com/technet/technetmag/issues/2006/01/ProtectMetaData/

http://www.sqlservercentral.com/articles/Security/sqlserversecurityprosandconsofapplicationroles/1116/