You don't like the idea to change the data model to create kind of 
virtual private database?

Come and see how foreign key relationships can be used.
Why to avoid is_member.
How to cache AD-role membership, example with job catching output from PowerShell scripts
How to write tests to check TVF's working correctly