It all depends on how you define "specific". Whatever it is, it will not be controlled on the MX. If it is pure IP-basd, a device in Front of the MX could handle this with ACLs, for everything else you likely need an integration with your radius server.