I thing the biggest problem we have is getting someone to risk blacklisting his CC and getting his account revoked, to test this.
I assume when connecting to live in any way, the kernel and running XBE are checked, but both only in RAM. Like Anusko said, why make seperate rules for the dashboard?