In these cases, make use of the noindex tag if you merely want the webpage not to seem in Google, but Really don't head if any user that has a hyperlink can get to the page. For genuine security, use correct authorization methods, like demanding a user password, or taking https://rsac.org