I believe it is counterintuitive. If you are disabling access to a book, you are disabling all pages, not just the cover.
May be it should be something like this?
- On subcategory creation: copy security settings of the parent.
- On changing parent permissions: ask admin if he wants to recursivly iterate over all children and update them.