Proxy user without normal connect?

Hi1
I'd like to create a user that can /only/ connect through a proxy user.
Is this possible?
Right now it seems that any user, proxied or not, needs create session
and that any user who has create session can connect.

Lots of Greetings!
Volker
--
For email replies, please substitute the obvious.