I've been using multiple content servers running with different restrictions...and that works. However it is definitely NOT for the faint-of-heart to attempt!
The current content server has switches for username and library restrictions. I would think it would be fairly simple to add functionality to the content server based on username. If username X then restricted to virtual library X, if Username Y then restricted to virtual library Y... At least I THINK it would be very simple...