In comment 29 on bug 11317 I suggested that perhaps the feature could/should include the ability to refine access control for the different directories one might expose to the tool. That didn't happen at the time, but would still be a nice enhancement.
Would go along nicely with https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24074 :)