PDC emulator isolated from member computers

We'd like to add a DC to our existing domain, and move the PDC role to it.  The new DC will be in a DMZ where it has full routability to all other domain DCs, but zero routability to all other member computers.

Is this a viable design?

Thanks,

Jaime