As far as I can see, permissions to send, receive etc are given to an address - one cannot restrict access per asset, correct? Any workaround? We are adding multiple assets, but sometimes we want to restrict how one asset is sent or received, but not on others.