Yes this did cross my mind, Ive used the same method for restricting CLI in the past for several extensions but was always unsure if Mitel would support dual SIP profiles.
It would complicate the outbound routes somewhat adding another entry to the list, I was kind of hoping there was an easier setting I had missed.