I struggle to understand your question, if you are asking if it's possible to declare the users who would be able to
access an unlisted extension (a whitelist) when it's unlisted by passing in their names, the answer is no. The CWS domain cannot be directly emulated even when the extension identifier key is static for directing extension related activities, if it could this would open up numerous security issues.
Your second question is neither possible - this would be a violation of user privacy by being able to scrape the names directly from the request server, and rather is another reason why this isn't implemented.
Your only recourse for implementation is to publish your extension with the Private option, and declare the names of the testers via their details who will be able to access the extension.