Limiting RPC capability?

[davidpbrown]

There's a post on reddit Corporate financial accountability which prompted a thought about how an organisation could do the equivalent of a cold wallet, to watch their own addresses. I wonder that if you have RPC password you can action transactions.. is there an alternate method, given TITAN's anonymity?.. or does there need to be a second RPC read only capability developed??