You can set up different user accounts and grant them different levels of access and functionality (i.e. disallow CPU-hogging transcodes). Users can also be restricted by MAC and hidden from the login screen unless you know the exact login name.

I have Jellyfin on my NAS and the "TV" user with which the living room TV is logged in only has permission to see certain folders of my movie library.