When a user clicks to delete a vCluster, the vCluster should be switched into a locked state whereby no sites are accessible via apache, and the ssh login is locked but none of the files or config is deleted. An e-mail should be sent to the passport users to let them know that the deletion request has been made. If they are happy for this to proceed, no action is required. If it was done in error they have 7 days to abort the deletion process and re-activate their vCluster.
This should stop accidental deletions of live vClusters, as during the 7 days, people should notice that a site has stopped working.