I found exactly what I wanted in my solution here: Follow-up on linkkey feature in combination with access rules