User Provided Service readable only by binding application

It would be very usefull if we were able to create user provided services containing sensitive information which would be only readable by application.

It would be like a new security role where even manager and developer could not access to the content of this UPS.

Most of the time, operator who deploys the application must not be able to access some sensitive information located in the UPS, either developers.