Would be great to be able to restrict configs based on whitelisted IPs. That way you could use one config for toolkit inside your environment, and another config for toolkit outside your environment.
That way if you had employees/contractors working outside your environment, you could set up a custom config for them to work locally with different roots and tools.