Pagelet /Related Content Service Security

This for tools 8.52 and v9.0 HCM.

We have a PS/Query that was used to created a Pagelet. A new related content service was configured for this pagelet. Our question is as follows:

1) The pagelet will be displayed on enterprise portal for all HR employees. As such, how should the security be defined at Pagelet level (last step, publishing pagelet) and for the Related Content Service (3 options). As all HR employees do not have access to running PS/Queries, how do we get around this restriction? Also, the query records have query security records (row level security)

2) Peoplebooks says Public Access wont work for Components or Tools objects.