Hi and thx for the Pi-Hole project
I wonder if it would be possible to add one privacy setting: "Hide Hosts" by analogy with "Hide Domains".
Reason: Using Pi-Hole within a network in some cases/countries it should not be available to see WHO was requesting 'whatsoever'-domain (user privacy) but WHICH domain was requested. That way the Pi-Hole-admin won't see who's requested which domain but can add unwanted domains to the filter without interfering user's privacy.
Alternate way might be to have one or two (4-eyes-principle) additional password to reveal the domains and/or clients.