Sebastian Heinlein <devel@glatzor.de> writes:
> APTDAEMON::Restrict::Users { "joe", "jane"; };
> APTDAEMON::Restrict::Tags::Allow { "interface::shell"; };
> APTDAEMON::Restrict::Tags::Deny { "interface::daemon"; };
>
> Would this be of any help to you?
Sounds like a great start.