Oh, remote install is already there, and the "kill switch" could be trivially done as a remote install of a package with appropriate conflicts/replaces headers.