Is it possible to require authentication on Docker registries in Katello?

The subject kinda says it all. We have a consumer that wants to host a
registry inside our katello instance, but they've got some things in their
images they need to restrict access to.

Looking through the workflows I dont necessarily see how to do this.