Restrict app usage per user

You could run different instances, people can still share stuff via federated sharing between these instances: