Restrict access to a thread for third-party users

See issue #71 for details