If you anticipate adding a removing a lot of permissions for sig ability, you could make a group with a never permission and just put people in and out of it as you like.
-:|:- Support Request Template -:|:- "Step up to red alert. Sir, are you absolutely sure? It does mean changing the bulb"