[security] Support for temporary use of unlisted users/groups in the select