They could create an api-group that has read-only access + the ability to switch pools. Then add your IP address to that api-group when the miner is launched. You can then use
CGRemote on your computer to monitor it and switch pools. It's still in beta but this functionality has already been added.