Note that if an admin user saves a page that contains spam and that we don't cancel the save, it would mean a new revision and the spam is going to be lost.

What I propose is to protect Admin users + known users + known groups and when such a user saves a page with spam:

• Cancel the save
• But don't disable the user (and don't log its ip)