I'm not very experienced with this stuff, but there was a mysql admin.dat patch for Tremulous. Perhaps if you modified it a little, you could make it do what you wanted. Also, you could modify Lakitu's adminbot to move anyone whose guid isn't on a whitelist to spec.