Allow specific IP-ranges not only countries in whitelists. Both for organization and per user. Have certain applications in a country I don't want to allow.