In these cases, utilize the noindex tag if you only want the website page not to appear in Google, but Never head if any user using a backlink can reach the page. For genuine security, use good authorization solutions, like demanding a user password, or taking the web site off https://rsac.org