[galaxy-dev] Limited access tools

We are interested in making some of our tools only available to a subset of users. It looks to me like all galaxy tools are available to all galaxy users. We were thinking about patching our local galaxy to use the same roles that are used for data files for tools as well. Is this something others are interested in? Is this something that's already being worked on by the galaxy core team? (We'd hate to duplicate effort if someone is already doing this) Thanks, Dave