Not out of the box, but it does let you implement a JS program to run on each request which could, say, whitelist an npub