Limit candidate record visibility

Hi,

Our client has two requirements

• Limit the visibility of candidates to only the hiring manager and those who they have selected as collaborators
• Limit the visibility of internal candidate activities (applications, messages…) when applying for different positions

We have gone through the security setup but still see some holes in the various approaches.

Your help is greatly appreciated.

Thx!