how about the pete replace by fee but only allow it for adding more fees to the same TX. ?
Like outputs must be the same, except for the change.
There is no way to know which output is the change. It is just another output. You could add a new input, raise the fee and a new output (second change). That is a secure way to implement replacement by fee. The idea was that a kill or fill could eliminate that complexity.