Well, I'm an idiot. I've been overthinking this. I'll just set up the off-site database and de-activate all users but one and only give that one user the lowest level of access.