Is there a workaround that will allow us to connect the RPi wirelessly without inviting casual discovery of the access point?
Absolutely, and it is not a workaround, but a feature of wpa_supplicant.
http://www.raspberrypi.org/phpBB3/viewtopic.php?p=290836#p290836