Ability to add "Do not assign" or "Suspend Official"

Full admins need the ability to suspend an official for a particular length of time without dissociating the official from the account. Need to scope out how to handle them in the assigning workspace (unavailable, maybe with a rule issue that says “Full Admin block” or something), and ensure they cannot self-assign.