system catalog permissions

[PropAAS DBA <dba@xxxxxxxxxxx>]

All;


We have a client which is segmenting their multi-tenant cluster 
(PostgreSQL 9.6) by schema, however if one of their clients connects via 
pgadmin they see ALL schemas, even the ones they don't have access to 
read. I assume pgadmin is pulling the list from the system catalogs.


What's the right/best practice approach? revoke all from public on 
specific system catalog tables? Which tables?


Thanks in advance