How to prevent AUTO switch while SSR is already ON

There is a issue that if the SSR was left ON when manually flipping the HAND-OFF-AUTO switch to OFF.  A switch later in time to AUTO will load the contactor immediately.  Perhaps a better implementation will be using (2) SSR in the same setup as the manual controls.  One for AUTO-OFF and one for START which will bump and lock via Aux Contact the activation just as manual operations do.