[chef] Restrict access to nodes

[Jerry Raj < >]

Hi,
I've been wading through the tutorials and almost everything works just 
fine. I had a question about how security works:

As far as I can tell, once a client is created from the web-UI and its 
private key generated, a client can connect as any node using the 
private key. Is it possible to restrict a client to using just a subset 
of nodes? I'm thinking of a scenario where we want to make sure that the 
nodes only have access to the runlists configured for them.

Thanks
-Jerry