Hmmm … how so?
As long as this is implemented in the back end, the Posts streamed to the client would depend on the users specific authorization.
“Non-admin whispers” would not be included in the serialized information to those not privy to them.
If there are any impediments to implementing this, I don’t think that’s one of them.