@shawin That might do the trick; unfortunately, it’s for Mac OS X Server only and looks super complicated.