I asked another question (How to Make Sure A Contract Is Signed By a Certain Party?) and got the answer I expected.
It raised the secondary Question of how to send a token with a datum to a smart contract to enable custom permissions via the validator.