The remote api should be able to support clients, so they can manage their own dns zone (via acme.sh IPSConfig plugin), email accounts, etc.

As for the implementation, perhaps allow specifying a client for each Remote User (optional), and do permission checks/query where clauses/etc. as needed.