Good justification for a lockout triggering mechanism built into a protocol:

Spitballing, but this could give a user a 1-month or 1-year or any kind of lockout condition by attempting to access it with a lockout-designated private key, along with a way to provide "proof of lockout" to deter attackers from continuing the wrench beating.