Thanks for that Alex.
The first option you suggest I had done already but unauthenticated users could still click on the "People" and discover from there.
The second option you provided works.

Much appreciated.