Thanks for the reply Alex.
Having to hold a potentially significant amount in the hot wallet does defeat the object of having cold storage a little though. Would it be possible that instead of the withdrawal failing it instead goes to requiring admin approval which would then give the opportunity for the admin to transfer funds to the hot wallet before approving the TX?