I expressed concern here, https://www-secure.symantec.com/connect/forums/sep-12-limited-administrator-deploy-package-not-createmodify
Right now, it's all or nothing. Either I give Limited Administrators full access to packages, or none at all.
We need to allow Limited Administrators to use SEPM to remotely deploy clients in their site WITHOUT giving them full access to the installation packages.