They should approach this the complete other way: when you WANT admin rights, you have to insert a special device. Sort of like the cash registers where the ma

They should approach this the complete other way: when you WANT admin rights, you have to insert a special device. Sort of like the cash registers where the manager needs to turn a special key to gain access to refund functionality. Maybe you build it into specific other devices-- the administrator's favourite keyboard or mouse has the admin token, but the $4.99 Dells they hand out to the hoi palloi don't have it.