workflow or custom script using it and controlling who gets it?