publishing powershell scripts to customer

It's a common problem and I don't think there is a straight forward answer.

What we do is create partitions for 'customers' and create credentials which allow administration of only their partition. This at least isolates the customer to some degree and limits the damage they could potentially do.

My 'wish' would be for F5 to allow us to create users that had API only access. Extra credit for allowing us to define what API calls are permitted for said user. Today this does not exist.