Ability to restrict which services of a particular account type are available

gnome-online-accounts already allows system administrators to restrict which account types are available (e.g. Google, Microsoft, Kerberos) but there's no way to lock down functionality provided by a specific account type. For example, say we want to allow users to access Google Mail but not Calendar, or vice-versa.

A key file somewhere could provide this capability.