When setting up user accounts using the User Manager, configure users to not see labels and to have only a single label in their label ranges.
Specify the account's Clearance equal to its Minimum SL.
With a single clearance and sensitivity label of INTERNAL_USE_ONLY, you would set the Clearance and the Minimum Label to INTERNAL_USE_ONLY.