A really simple CA model would solve this perfectly. In practice it's centralized and "just works" for most people, but it is decentralized in nature and allows

A really simple CA model would solve this perfectly. In practice it's centralized and "just works" for most people, but it is decentralized in nature and allows you to switch authorities at will.