This is essentially what private relays could provide if clients allowed you to legitimately have only a private relay where you whitelist npubs. But seems like all the clients thay ive looked will still pull from some default relays and have not prioritized this use case 😔