Use Confluence RBAC to control access to embedded reports

I want to publish a report to group of Confluence users but I don't want them to be able to re-share the original public link, that it's not just easy to lift but you have a button to show it!

In other words, have a way to publish the Shareable Link to some users, and give the visibility control to Confluence.

Thinking out loud, if the Confluence plug-in used a JWT-like token that was valid for a few hours/days to give access to the report instead of just embedding the long-lived public one, it would produce the desired outcome.