fine-grained access to private resources from remote