OK basically, if a service user does not want to be attended by unvaccinated staff, it's up to the service provider to make sure that happens. Nobody needs to divulge anything about anyone, nobody needs coercing or compelling. It just gets organized by unit managers etc. and recorded in a care plan that person X doesn't want contact with unvaccinated staff. Under no circumstances does this mean unvaccinated staff can't be employed, it just means the service provider needs to do risk assessments, get informed consent .. and do all they can to facilitate vaccinations for everyone (staff and clients) who wants one.
I don't see how it needs to be complicated or authoritarian, and I do in fact currently work at the sharp end of this.