VMWARE (as per emc71378) does not requires a lun at address 0.
If you want to hide the VCM we can work in that direction .. But however remember that ESX does not need LUN 0

In older Symmetrix (with codes up to 5671 AFAIK) you can ask your local friendly customer engineer to enable flag FF2_VCM_DV_Restricted on your boxes .. This means that PRIOR to enabling the flag you have to explicitly GRANT access to the VCM to the hosts that will still need to access the VCMDB becouse when enabling the flag, the device will become a volume just like any other and will require you to mask it before being able to see it.
With DMX3/4 (codes 5771 and later) the VCMDB is simply a gatekeeper so you can simply avoid mapping the VCMDB itself on the FA ports, resolving the issue at its root.