security switch on wsrep_cluster_address

could we add a new parameter that allows us to specify that only the ips listed in the gcomm address can join the actual cluster ?

this is a security issue, maybe not that big but still, as of yet there is no way to prevent a rogue node to join a cluster, get all the datas through an SST and get away with it.