Cant you do this by setting up a specific Storage Area that is only available on the nodes you want them to have access to. Like a specific ZFS dataset. Only the nodes with that storage will be allow to be managed in that resource pool, also only the VMs that are created and propagated in that...