There is no way to apply security on the categories so all categories are shown.
You apply security on the process via the Adminui (Services->Application and Services-> Service Management-> Security tab... click Add Principal button at bottom. Only the of users/groups in this list will be able to invoke(start) the process and only the services a user is allow to invoke will be displayed under the Category node.