The secret here is giving pi its own user account on your machine, using Unix permissions.