how to make a user non sharable?