Perhaps a client/app could be coded in such a way that you couldn't access it or use it without an invite? 

I'm not a developer, though I have dabbled in software development. Just throwing out food for thought and perhaps challenges to chew on.