Perhaps even better would be to limit transfers including post-hoc revoking domains that are found to have been sold.