Well, most of the islands are cached content, so you can't really limit who they are displayed to, since there is no check to see who the user is, it's just static HTML by the time the island is served.
There's not really any way to hack this functionality in without some major work.
