We have a need to keep a proprietary theme in a directory that isn't readable or writable by a client.
At the same time, the client needs to be able to do standard Drupal updates (ie, they will have full control of the web root of the Drupal installation, but nothing above that).
What's the easiest/best way to accomplish this, assuming it's possible?