Deployer Constrained to particular pkgs

Looking for reccomendations to allow developers to use deployer to move flow services in only the packages that they are able to modify. The ultimate desire would be to allow developer to move flow services that are contained in packages that they are authorized to from development to test and to build the package for production and then have a third party verify and deploy to production?