Yeah I was kinda thinking of what Ray is mentioning something along the lines
1.)An appstack for most of your applications
2.)An appstack with the dication software its self
and then a mix of user groups and limiting the app stacks to machine prefixes to limit it as you need.