Hi Furiousfrog. That’s what I did in the end.
Rather than the direct package link, I created a new link template with the same layout as my preferred page template. I then embedded it in a standard page using the link shortcode – I then set access control on it. It was a bit of a workaround, but I think in the next upgrade, packages will become a Custom Post Type, which will make it easier to control access.
Thanks
Gareth