Short answer: this is not directly supported in OpenHAB.
Longer answer: an effective work-around is to use a reverse proxy such as NGINX to limit access to specific sitemaps. See details in this thread:
https://community.openhab.org/t/hiding-a-sitemap-from-non-system-admin-users-oh-1-x/20434?u=globramma