Add disable profile option

Edited for clarity.

Currently profiles are loaded once but if a user permissions change during sessions, there doesn't seem to be a mechanism to disalbe or hide a profile - since they are defiend at session startup. Is there a way to 'hide' a profile without forcing the user to log out and in again?