How can you keep 'pending workers' out of the learning catalog?

Summary:

Our company's pending workers view videos (stored in learning) during the onboarding process from a deep link. We'd like them to ONLY be able to view those videos, but not see anything in the remainder of the catalog until they're active employees. We tried a Global Access Group limiting the rest of the catalog access to ONLY Active Employees, but that's not keeping them out. We used to have a 'Pending Workers- No Access Global Access Group' that did the trick, but the ability to use an access group to restrict access was taken away with 21B.