Something like:
<action application="bind_digit_action" data="default,**,exec:ivr,new_destination"/>
Will send the call to an IVR called new_destination when it catches a **. Even if that's in the middle of a call, the other end will get hung up on. I presume it works during a bridge, too.
Check the wiki for how to execute other options.
-Avi