Uh, I'm not sure how what you are saying is different from what is implemented here, except that @rlr called it `ALLOWED_USERS`?