I believe you already can, using F3:: for everything is just a fallback if you've forgotten what class the method belongs to. I had a thought to plug in an ACL check inside the __callStatic() and autoLoad() methods, since it's already searching for the class and method, would be a simple thing to run that through an ACL table to see if the user has access to the class/method. Just a thought.