On 3/30/2016 5:16 PM, Ken Brown wrote:
I am in the process of discussing this with Norbert Preining[2],
starting at http://tug.org/pipermail/tldistro/2016q1/000259.html. We
have arrived at an agreement as to how to modify tlmgr to do what I
want. (The modification may or may not make it into upstream TeX Live,
but Norbert has indicated that he might use it in Debian.)
Update: The modification has just been installed in the TeX Live trunk
as a documented way for distros to include a restricted tlmgr that
doesn't interfere with package managers.