Since Jeff found out about upstreaming categories to different servers, the whole restricting access to certain categories is solved. We've set up an internal server where our work entries are uploaded. Since this is internal, and it is not exposed to the Internet, this should be relatively safe.
