I just use AUTH-protected relays.

Yeah, easiest way is just to have relay settings for that. Manually white listing users to write on a relay is the first way to do it. I don't doubt multiple communities per relay can exist as a later on development, but this as base case is pretty easy to work with.