Comment Visibility/Security

Summary

When a recruiter leaves a comment on a candidate's profile, has anyone determined a best practice for restricting user visibility?

Content

We are looking to develop a process for executives to use to upload candidates' resumes to Taleo.  They will want to leave comments on the candidate's profile that only certain users will have the ability to see.  We have inquired about this to MOS and they said that there this type of security does not currently exist.  Has anyone else experienced this situation?  If so, what was the resolution?  We are wondering if maybe a UDF within the candidate's general profile would suffice and we could set it to confidential or restricted.  Maybe we would need to create a new