I found out that evar user/ group rights can't be set. This seems really strange for me, because all other variables like s.props, events, ... are available for setup. I think this is a major bug because it makes absolutely no sense! It is common to track many data in s.props and evars as well at the same time. Hiding information for a special user group is not possible!
It would be great if someone can fix that!