Assuming the allowed callers would only be calling the one resident, you might be able to use Caller Based Routing. Add the allowed numbers as Allow-list entries with the resident's extension as the destination number. Then any incoming call on any trunk with that caller ID will be routed directly to that extension, no matter what DID they actually dialed.