question: restrict access to a machine on user-basis