I kinda like this idea, perhaps an event such as 'onBot / VehicleMount' that tells the vehicle spawn that a player entered the vehicle. Then, you could use variable checkers to kick them out if they don't have a key with the dismount event.
Heck, you could also use something like this for GTA type of things, like your 'legal rating' goes down when you drive a car you don't own.