Given unique nature of the wiki (Foundation managed) and therefore unique role of Bureaucrats on the wiki (all staff), it would be easiest for them to be able to remove sysop/admin rights from users given they can already add them and are primary managers (along with Foundation T&S) of user rights on that wiki.
Area to update: wgRemoveGroups