I have found no TBASIC keywords that can directly alter the stored program. You can alter SV of TIMERs and COUNTERs.
If your PLC has non-volatile EEP storage you can wipe this out. I use EEP to store all sorts of configuration data so that my customer can run the same PL6/7 program on several systems. Only the EEP image changes between systems.
Why do I mention this? I look for a unique signature in EEP to determine if the EEP based configuration data is valid. If valid, the code runs. If not valid the code builds a generic configuration data set in EEP.
For your usages, when the usage counter expires, zero out the EEPROM and reset the PLC. The CF that is called on the first scan can simply put the PLC in an endless loop if the EEP has been cleared. This will brick the PLC for 99.9% of your customers.
Best regards,
Gary D*ickinson