Cloud AEM: is there a way to block access to some content by IP, without hacking the dispatcher configs?

WE can block access to the entire site using AEM Cloud Managers IP whitelisting feature.

The business wants to hide only specific directories of content.

We can do this via dispatcher config, but this requires a release cycle (which is 2-4 weeks), so if they want to add/remove an IP, or protect a new folder, its a long wait.

Is there any in built way to do something like this in AEM cloud?

We could create a servlet filter for all pages, create a settings page that allows content editors to administer the IPs and folders list, then the servlet checks this for every request which comes in, but we are worried this will affect performance.