You can create a wrapper package owned by sys, and then grant execute right on that package to whoever needs it. you would be presenting just the methods that you want to present. And you can verify the inputs within the wrapper package.