invoice attachment category data security

Summary: I recently had an SR open about creating a custom attachment category - we are not wanting suppliers to be able to see internal attachment on invoice - but this is not feasible right now. I did come across a document about data security for attachment categories and am wondering if I am able to hide a seeded attachment category from suppliers, and if so, then what are the appropriate steps in doing this? I am assuming this is done by data security.

Content (required):

Version (include the version you are using, if applicable):

R23C

Code Snippet (add any code snippets that support your topic, if applicable):