Get PrismLauncher, create an offline account and set your server to online-mode = false
Then either only allow the actual participants on network-level (maybe through a VPN), or install AuthMe on the server
I'm hoping for mods/patches/launchers that provide an entirely separate infrastructure (so create an auth server for your friends, launch many different servers with the same accs, eg. modded, vanilla, minigames)