? un-publish in ZPM ?

During a discussion of implementing a private ZPM Registry
I met the question of how to unpublish (or lock) a published package.

Digging articles and docu up and down I was unable to find an answer.
Any hint on where to search is welcome.

NB. local install / uninstall is clear.