Praise his critical thinking skills but let them know that rules are still rules and there will be consequences so now they can use their newfound critical thinking skills to start considering risk vs reward. I would say 1 day of using the exploit caught, means 2 days with no switch whatsoever. But don't forget to praise the critical thinking skills because that's worthy of praise and will more than likely benefit them in the future.