Lock a project down to a particular Cluster
The Mass site is going to want to allow in commercial users, who should only be able to use their cluster. After talking this over with Mike Zink, the simplest way to do this will probably be to make a project that they manage membership for, and limit the project to using only one cluster.