It seems I can't hide exact repositories from contributors or observers.
I see that I can restrict access to write to repositories and their branches, but how about read access to repositories?

To do it in current version, I have to create another project and move there repositories I need to hide from some developers. It's terribly uncomfortable.