To get into those modes you need to be in 1TR which means you need to assert physical presence (hold down the power button to boot); that's what I meant :) The

To get into those modes you need to be in 1TR which means you need to assert physical presence (hold down the power button to boot); that's what I meant :) The user is in control, they just need to prove they're physically at the machine.