Mine

#user yes {
#       default {
#                allow spoof
#                allow spoof_all
#                allow spoof_privport
#        }
#}

/usr/local/etc/oidentd.conf
default {
        default {
                deny spoof
                deny spoof_all
                deny spoof_privport
                deny random_numeric
                deny numeric
                deny hide
        }
}

user hidden_user {
        default {
                allow hide
        }
}


/home/hidden_user/.oidentd.conf
global {
     hide
}