I have semi-solved this problem.  I have placed the dsmadmc command in a
execute only script file.  The key is automatically changing the password
often in case it gets exposed.  So, I wrote a script that creates random
passwords and changes the password often.  I run this script under root or a
userid that is the only one that has access to read/write the dsmadmc script
file.

I know we need a password generate function for server directed dsmadmc
commands, but there is not a real good way to do this.