Restrict moving candidates after rejected

Summary:

We removed the "Move Candidates" security priv from our recruiter roles but realized we still want to me able to move the candidate from different phases. However, we would want to disallow them from being able to move a rejected candidate back to prior phase. Is there a way to do so without removing the security priv.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):