This sounds a lot like the firewall technique of port knocking. Poke this thing to enable a ruleset, then another thing in that state for a different ruleset, etc.