Allow to restrict access to a group of users or client machine types, who are allowed to use Nomad Web

I would prefer a solution based on two or three layers / options:

First on Server access level definition allowing a service for an user, like it was done for Traveler.
Using the Traveler Access fields in the Server document of the Traveler defines access on user level.

Second on a database level in the ACL entries Client Types of the database.
Extending this one with additional more detailed Client Server options

Client:
- Notes Client
- Nomad Web
- Nomad Mobile
- Other Internet Clients (IMAP / POP)
- HTTP Access

Another third option could be adding a new Database property:

Allowed Client Access:
- Notes Client
- Nomad Web
- Nomad Mobile
- Verse / iNotes
- IMAP / POP3
- HTTP Access


And add there an option to use a formula, which can be used and evaluated using @ClientType @Plattform @Version to allow access to that database.