Yes, there is definitely an insurmountable hurdle here. Mining is, by definition, a random process. Therefore, you cannot distinguish between a user getting really really lucky and mining a lot of blocks, or a user with more hash rate than he is "allowed".
So the only thing you could do, is...