More efficient way to block users so they don't get counted as licensed users

Customers would like to be able to control the ability to block users from accessing K2 so they don't get counted as active licensed users. Users get counted when they are authenticated against K2 even if they are blocked by the authorization framework because they are still technically authenticated and logged in the system as having accessed K2 in some fashion. When users that wouldn't need access to K2 accidentally stumble across a worklist or a form, block them so they aren't counted as a licensed user. Using Authorization Rules in IIS can block users before they drop down to the K2 website and authorization framework, but it is not as graceful and puts users in a login loop.

Have the system warn K2 admins that the user count is reaching what is allocated by their user license.