Have a separate View directory List policy for the People page
use case 1: The webdev company does not want Client A to see the people from Client B, as sometimes this is even a legal requirement by a NDA.
use case 2: Open source installs might not want logged out users browsing the directory.
source: https://secure.phabricator.com/chatlog/channel/6/?at=113783