If a user's security account could be made inactive as of a certain date that would be helpful. We often know when an employees last day is going to be and we have to remember to go in the next day and remove all roles associated with the employee.