Some day you may want to look into the impact of privacy legislation such as GDPR when it comes to your position of "Searchlight references are private (hidden to the candidate but viewable to employers that candidates give permission to)".

IANAL, but I have spent many unpleasant days reviewing GDPR and I think it's likely that such data is the candidate's personal data and they are allowed to see it.