CORE-718 will allow for customers to order restricted packages, that exist on an order form, if they are logged in. Basically, any restricted packages on an order form would be hidden for most users. If the user is logged in, then they would see the restricted packages for which they have access.
Not done yet, and the task in Private, not sure why though.