Hi @ejacobson ,
Happy to help! You can set certain install scopes: https://marketplace.zoom.us/docs/guides/auth/oauth/oauth-scopes and provide the production client id/secret to only those authorized users you want using the app’s access to the APIs on your behalf/.
This thread related to sub-accounts and your use case may be helpful as well: How can I create an OAuth App only used for the master and its sub-accounts without publishing?
Thank you,
Gianni