Any ideas to how this can not be abused? (Cupboard oriented offline protection?)Suggestion

I really like the idea of this plugin. The only problem is that it can be easily abused.
Friends can be asked to build the base and his mates own it and have unlimited offline protection while the builder is offline.

So, new ideas how to make this work properly would be good.
The only idea I have for now is to combine this with all cupboard authorized players.
Surely they can deauthorize themselves to get the offline protection back.
So, maybe the plugin could notice who had been added to the cupboard before and make all these actual authorized and former
authorized counting to the offline protection.
This means even if a player isn't authorized anymore the offline protection wouldn't go active as long as he is still playing.
Would this be possible?

This is the reason I haven't used this plugin yet. If it were to check for TC auth combined with who built the base that would be great. RemoverTool has a similar feature to check both:
"Use Entity Owners": true,
"Use Tool Cupboards": true,