AirPrint and Apple Configurator
What I ended up doing was to implement Printopia Pro, which incorporates user groups. This has the effect of locking down the printers except for the users who need access. If you own Printopia, you can get $20 off on an upgrade to Pro. If you need permission-based printing like I do, I'd recommend doing so.