Comment by api

It could be done by requiring client side certificates and creating issuing authorities for them.