How to configure a jenkins node to only accept jobs that specifically requested this node via it's label?

I know how to restrict by Job name on the node configuration page: But now we have (multibranch pipeline) DSL job scripts that dynamically determine on which node they should run, and request it via node(label: ‘NODE-LABEL’) { … }. I would like to restrict one of our nodes (a dedicated mac mini responsible for… Read More How to configure a jenkins node to only accept jobs that specifically requested this node via it's label?