Add a the postfuction on the create transition on a workflow. Configure it to set a issue security type that is not relevant for that project.
(BUG) Create issue in that project. The issue wont be visible to anyone ever.
I would assume that the postfunction would fail to set the security type if it is not relevant for the issue being created (you have enough information at this point). I guess it could either fail silently or force the create to fail.