Yeah, that'd be a pretty reasonable solution. Along with the automatic deletion if it was never used/approved.