Can Galaxy be restricted to specific users?

Can it be integrated with Kerberos authentication?

Can it be easily restricted to certain IP addresses or IP ranges?