The only way I know is to manually install AWSTATS (not via cPanel) so it resides in a public_html folder. Additionally, you can password protect it with .htaccess if you so choose to.
Thats what I figured. Before having my own cpanel server I would do that very thing on some accounts that I had when they disabled awstats due to sever load.