7 ms·

SandBoxie is a thing, but I don't know if it supports denying read access to existing files. It's more designed to stop writes.