@renchap shouldn't prefixes with acl be enough? That should prevent wrong access without running multiple instances