You can have a whitelist for allowed users and ban everyone else by default, which I think is where this will eventually take us.