IBM AIX root access

I have a number of different Unix platforms I support, so we setup a trusted server for me to use as a management tool. The problem is that we recently added AIX to the mix, and in order to lock the root account from telnet access (a security policy at this client site) it appears I must also lock out trusted server (rsh or ssh) access to the AIX hosts. Has anyone else run across this and come up with a solution to allow trusted host access for root without leaving the root account open to telnet access?