This seems possible.
Two things are important to understand for this situation:
1. Load sharing is handled by MFEND (McAfee Network Driver)
2. Failover (the virtual IP) is handled by VRRP
If we have HQ and DR share the same VRRP ID (set in the UI), then we allow them to share a virtual IP (so failover will work).
To prevent the DR node from participating in load sharing you could either setup firewall rules to block "protocol 253 traffic" or you can configure the DR node to use a different "mfend" identifier (see Re: MWG 7 clustering with 2 independant Proxy HA clusters).