NFS : restrict kerberos authentication to some user accounts

I'm trying to grant access to a single freeipa user to an nfs share (if possible the machine account). My etc exports looks like :

/data lemp1.domain.local(rw,sync,sec=krb5p)

And my working mount is :

mount -t nfs4 -o sec=krb5p nfs1.domain.local:/data /data

Now I can mount the directory, I'm trying to be more restrictive, and allow only some kerberos accounts to authenticate, is there a way to do that ?

Thanks !