Thanks for clarifying the situation; if you're protecting customers from each other for reasons they want rather than reasons you want, and you're not building

Thanks for clarifying the situation; if you're protecting customers from each other for reasons they want rather than reasons you want, and you're not building general-purpose hardware for end users, that makes sense. Then in that case, I would absolutely just go with an account and registration system, and handle access control that way.