Implement the access policies feature, as described in: http://beaker-project.org/dev/proposals/access-policies-for-systems.html
This was implemented and released in Beaker 0.15.0. http://beaker-project.org/docs/whats-new/release-0.15.html#system-access-policies