@vrypan.eth
Rough idea, may not be feasible: Right now, a signer can either be approved or removed. There could be an intermediate state, something like "stoped".
If a signer is stoped:
- New messages signed with it are not valid (but old ones are not pruned)
- It can only be removed (not approved again).