Answer
Permission sets aren't the right mechanism for this — restricting or hiding a single column is done through a Base Profile instead. Create a Base Profile with the relevant column hidden, then assign that Base Profile to the specific user(s) needing the restriction via Solution Manager > Security > Users > Create User. Permission sets control broader screen/action-level access, while a Base Profile is the layer that controls individual field/column-level visibility for specific users.