obfsproxy should support per-connection arguments passed through SOCKS authentication. This way, Tor clients can specify shared secrets to their managed obfs2 transport.