SE already does this, have done so since 2002. Using a token bypasses this lockout and people you know you let use your account can add their IP to it and bypass the lockout.