And this, ultimately, is what makes me nervous about this proposal -- it's one thing for an academic library to inadvertently reveal confidential bibliographic records.  That may cause annoyance, it may anger donors of materials in an archival collection, it may at a stretch cost somebody a job -- but the consequences do not reach to the level of affecting somebody's safety or freedom of movement.

Whether or not the patch passes QA and my review on the technical merits and gets pushed for 3.14 or any future release, I /strongly/ encourage you to consider that air-gap security [1] may better protect the users in question than any possible implementation in Koha, which simply is not design as a high-security application.