How to Restrict Specific Actions in an ICRC2 Ledger to Certain Principals?