Have the bot revoke access to the things people do instead. Reset LDAP credentials or something. As long as it's a very quick and easy process to get access restored.