One of the only useful things my previous employer did was disallow moving tags via hg hooks.