Use Case:

Workflow 1: When a security tag is set on a folder, it assigns that same tag to all children folders and documents.  I'd like to have the opposite workflow.  
Workflow 2: When a security tag is removed from the folder, workflow should remove the tag from all children folders and documents.

For Workflow 1, my rules are Entry Changed, Tag X is set, User does not equal wfuser.
For Workflow 2, I'd like to have Entry Changed, Tag X is not set, User does not equal wfuser.

However, I feel like that second rule will evaluate to true whenever any document is changed, regardless if the tag was previously set or not.  

Any thoughts on how this may be possible with starting rules?  I know I could have it be a Business Process as well.