permissions per server
It would be great if you can configure permissions to connect per server, in that way that a usergroup is only permitted to connect to a subset of servers.
That way users (eg. external partners) can be allowed to connect to the management endpoint only and the permissons on the management endpoint allow or disallow the connection to the final destination.
This has to work with active directory users and groups to be userfull at a greater scale, of cause.