As we already know that physical access = game over so design your systems accordingly. Plan 9 does this by having a central auth server. You lock the it a cup

As we already know that physical access = game over so design your systems accordingly. Plan 9 does this by having a central auth server. You lock the it a cupboard and add some armed guards if you need. In fact, booting a Plan9 terminal doesn't even need a password. However if you want to connect to the other systems you're going to need an auth ticket. Other systems should be using something like Kerberos or a domain controller or whatever schemes are available. If it is likely someone will have access to your terminal and they might steal from you, storing passwords there is d u m b.