The list owner “whitelists” the team member on a team or list basis.

NsecBunker provides HSM policies that can enforce any arbitrary authorization.

Probably for lists like this a FROST solution would be better though but that’s way further down the line and nsecBunker is already here