Just thinking outside the box a bit... and probably a little extra work...

Maybe by taking permissions from other groups? I.E. removing them from the user group.

This may be something SD can look into adding in the update. Just seems bugged that if I ban someone and they do not log out, that they would still have access until their cookies expire?