Callo director is fairly easy. In your case, you would route the given number to a trusted extension that was always rereouted to vm. It would then end up in the mailbox of the trusted extension.
Created this mailbox and allow call director. Go to call director and choose call flow for this mailbox.
I might put caller-id filter first, on match hang up else menu that doesn't repeat and times out to blind transfer to desired destination.