This is not lightning, which requires a utxo per user, but a new thing. The controller would obey user commands to transfer funds, and be penalized if it didn't do it.