Is it necessary to enforce that with a trigger?  Surely you can enforce it at the application level instead?  

This makes it harder for us to, e.g. run diagnostic/repair/migration queries.