Can I keep the gateway restricted?

Yes. If restricted, the gateway is accessible only by gateway managers. Managers can change the visibility whenever they want from the admin dashboard.