From the requirements you've put forth, have you looked at/considered WCF + PowerShell? This would be far easier to control access and limit what can be run on the remote end.

I have an example of how to do this, both in the PowerShell commandlet and the WCF Service Activity side.