This can be done with a proper capability system.