Attached are patches that adds a new ACL to allow you to hide the workflow to certain users well still leaving it functional for others.
Here are the links to the brach were the latest code is kept.
Cerb4 -
http://github.com/rmiddle/cerb4/tree/jira/chd-1618
Cerb5 -
http://github.com/rmiddle/cerb5/tree/jira/chd-1618
Somewhere along the process from Cerberus 4 to Cerberus 5.0.1 the patch is no longer valid. I didn't find it useful after implementing so I am going to drop support for the patch.
Thanks
Robert