The obvious answer would be to make it a paid channel. But if that isn't appropriate, you need to explain in more detail what you're trying to do, how you plan to authorize and de-authorize users, etc.
See https://sdkdocs.roku.com/display/sdkdoc ... nd+Linking for one such idea.
It conveniently passes the buck to an external entity, a web server. Problem solved! :twisted: