The model is backwards. Put a flag in your system that an attacker can set for a monthly payment, and THEY have to keep everyone else out while allowing the business to operate, otherwise the next attacker could change the flag and collect the payment.