Allow certain requests for some clients but not others

Hey,

I have two types of clients that should be able to do the following:

1) access local zones only (and forwarders to some partners)

2) #1 plus full recursive queries (to the Internet)

How would I go about configuring that? (It is possible to have local zones in some backend server, that data does not need to be located within Unbound.)

Thanks.

Marki