Still trying to figure out if this sort of gateway works with apps that are not OAuth-aware.
I just put addresses in the file specified by check_recipient_access with REJECT