We have done this on a few occasions. Our process was to create the project, then disable inherited permissions, then create the tasks. Each task must then also have inherited permissions disabled to ensure someone doesn't accidentally get access. Lastly, the desired people are shared to the appr...