They kind of hide the directory search settings at the top of the privacy page. You can lock it down a lot more than the default.