Allow restricting app to a known subset of users