I have not found any way to require a certain publisher to an application or even better, a stream name within an application.

I would like to make sure that one live publisher credentials can only send to a certain stream, preferably without creating a live-application for every publisher. Any hints on how to achieve this would be appreciated.