Experimentally! We've a bunch of nodes, and one should have only mysql access, and another both mysql & hive/hadoop access. Similar to stat boxes.
We'll initially require people ssh tunnel into it, but eventually we'd like to expose it over the web (with multiple levels of LDAP auth)