How to auto remove from groups when trust level falls?

If you’re self-hosted, you could do it at the rails console, but it’s a bit tricky.

You can see who gave them the override by looking at /admin/logs.