This would be an amazing feature.  That way I can restrict admins to LAN or VPN access only.