Asterisk-IM should be able to run with limited AMI permissions like"read = call,command,agent,user" and "write ="
See http://www.igniterealtime.org/community/message/164579