A simple trick to exclude/limit who can be reached via the directory is to enter both the first and last name in the 'First Name' field.

For example, 'John Smith' can be entered as 'JohnSmith'. This way, when the caller gets prompted to enter the first three digits of the user's last name, the directory will not be found.