This would be actually quite easy to implement and wouldn't even produce lag since the socket extension is working asynchronously.
The only problem you'll have is that the admin plugins have to be modified slightly to inject the additional authentification plugin before the reservedslots plugin kicks the clients. OnClientPostAdminFilter is not sufficient here since it doesn't support asynchronous operations like the OnClientPreAdminCheck+NotifyPostAdminCheck combination does.