figured out a solution. here’s an example:
1) i have a resource called "resume (4)" (protected), with "hide from menus" checked
2) created a weblink called "resume-link (16)" which points to "4" (make sure "hide from menu" is unchecked on this one)
3) since "resume (4)" is set to hide from the menu, it doesn’t cause a duplicate in the site navigation when the user logs in
requires two resources, but oh well, it works