Disabling/restricting user search

If you want total separation between different user bases, running multiple Discourse instances might be easier and safer. (With Multisite, this requires almost no additional resources.) Otherwise, while you might be able to build a plugin that closes some loopholes like search, there’s a significant risk that you’ll overlook some vector.