Ideally it could be dynamic too - likely based on a pubkey AUTH.

In theory it could then be like a paywall or gated community (like you can comment using kind1, but not publish blog posts).