We have created a directory /usr/local/admin/adsm that only root can read.
That way only a root user can be able to look at the scripts, our root
users have admin rights to TSM. We have been using this for quite a while
with no problems.