Please create a new user group (trusteduser). AutopromoteOnce: 30days from the date of account creation, and 400 edits.
- Create a protection level (trusteduser protection) for this user group. Sysops should be able to protect pages so that only users having this right would be able to edit pages.
- Bundle "trusteduser" right to sysop, bot group
- Sysops should be able to grant/revoke this user right at any time if needed.
Discussion: here