Hey James,

This is something I've attempted to solve a number of times over the years.   My lowest friction solution is to get rid of "forward all email here" and instead simply ask each outbound email if they're sending to an "authorized" person.   How do we control authorization?   By a new property on the group table.

Net effect:   You can decide who gets sub-prod notifications or not, and those people receive ONLY the notifications they were targeted to receive.   OOB you can only get everything or get nothing.

You can see the full solution on a blog I wrote here:

Use Sub-Production Notifications Like a Boss