Comment by bestorworse

This can be done with a proper capability system.