Yes. In the IPS, route the authorized calls to one trunk route, and the unauthorized to another. Then, in the ICS, give the authorized route's trunks permission to route out on the PRI, and don't permit the unauthorized trunks to do so.