More experiments reveal that _can_steal is only called if _has_restrictions has already returned True. Removing that requirement (it’s only an optimisation) I can now control work stealing for each task and worker, at least for a customised copy of stealing.py.
I’ll look at putting together a PR