> Another solution would be to allow gateways to declare that their coins are only redeemable by a limited set of accounts.

Yep, that's baked into the protocol :) https://www.stellar.org/api/#api-accountset - require Auth flag