Dynamic Varnish ACL matching based on host

Question

I have a varnish cache handling a large number of hosts, some of which need to be secured by an ACL, the ACL is specific to each host, and some hosts do not have an ACL at all.<