Restrict s2s to selected users?

Is it possible to grant rights on a per user base?

The only way I have in mind right now is a second Openfire that is connected via XMPP Gateway to the first as I can restrict the usage with the gateway.