I like your approach and it looks like its usability can be greatly improved by having an admin panel to easily taint a given alias rather than ssh to the mailserver and modify sender_access manually.