The pros will probably answer better, but I'm guessing you could set up an outbound rule something like this, assuming you want to only dial ext 4321 from ext 1234:
Calls to numbers starting with prefix: 4321
Calls from extension(s): 1234
Calls to Numbers with a length of: 4
I think that would specifically allow a call from 1234 to go to 4321 and nothing more. I'm not sure how high up the rule hierarchy it would need to be, probably at or near the top.I think there is a flaw in my logic, but I can't test it right now. This might ONLY allow 1234 to call 4321 and other extensions couldn't.