In these cases, utilize the noindex tag if you simply want the site not to appear in Google, but You should not head if any person with a hyperlink can reach the web page. For genuine security, use proper authorization methods, like demanding a person password, or having the site https://rsac.org