Taint old/faulty Packages from being installed

**Describe the problem/challenge you have**
I need a way to reject attempts to install an older version of a package because it has a critical bug, and there is a newer version of the package available w/the fix.
When I have a package that has a bug I will probably create a new version that fixes it, and I want to prevent any new consumer of the package to install the faulty version.

**Describe the solution you'd like**
I would like a way to define in a Package definition that the package is obsolete/faulty so that it would show in the output of the CLI. Alternatively I would desire that kapp-controller rejects installing Packages marked as faulty.