One "work around" for this...
for my projects that are with clients, I create a workspace for the company, then a sub-workspace for the client.
Most of the stuff goes in to the sub-workspace that the client has access to. "private" stuff goes in the main workspace. When in there I can see private and client items, but client only ever sees the "public" stuff.