yes, hiding will partially work but if the clients set his browser to show all hidden files or "ls -a" then he's still able to see it all.
something like veto in samba but there's no equivalent option in nfs. acls might do a trick for this.