Disallow find for approved visitors & approved visitors blocking?

[georgematheos]

These routes have been disallowed for external providers (if we need to change this later, we can). I don't remember by which commit.