Comment by bobbylarrybobby

The right move would be to move it into /Users/softwareupdatefiles and require admin access to read (or something like that).