Disable User REST API for authenticated users

For security and privacy purposes, it would be a good idea to include in the settings an option to disable the User REST API even for logged in or authenticated users. This way, usernames will not be exposed to regular users using /wp-json/wp/v2/users route.

Thanks.