Add or remove a role when limit reached - only for that session

Use case, I am facing:
User may log in from only so many locations (IPs, devices etc.). Further logins shall prompt for logging out the/an other session.

HOWEVER, we would like to delay that prompting to only happen when the user tries to access premium content, they should still be able to write comments, manage their account etc.

A solution, I have thought half through (before discovering this module), is to either add an "unprivileged" role to the new session or remove a "privileged" role if session limit is reached - or vice versa, only adding the privileged role to or removing unprivileged role from the new session if the session limit is NOT reached.
I only want these role changes to last for the new session - no changes to user's role memberships in the database should happen.

Would this be something to incorporate into this module? Or a helper module? I'd be happy to work on this, but would like input as to where the integration point in this module is best.