You can't do that in most projects without breaking security guidelines.

There are contracts signed and NDAs for everyone that has access to customer systems.

Although I also do conceed many offshoring companies forget about that, until someone that wasn't supposed to exist on the project does something that ends up on an escalation.

It is very common in consulting and agencies, when not getting enough projects.