It shouldn't be that big of a security hole - someone would have to setup an application server and then talk to the agents.
Can you narrow down the IP address range to atleast one network? (and put that in the exports file).
I think if you remove the license.* files out of the rsc directory the agent will be unlicensed.
Try creating the following empty files before installing the agent: