Is it possible to make a user group that can read and write certain things only? If I give someone a router that I can control, I want them to be able to add dst-nat rules so they can port forward without needing to contact someone. However, I don't want them to be able to do anything else. I saw that you can specify a WebFig skin so maybe this can hide everything except for the NAT rule table.