You should be able to tell them to not release the package to anyone but you. As previously stated.