If all else fails, consider spinning up a virtual machine just for that client, and do all work, install all required apps for that client inside that VM only.

If all else fails, consider spinning up a virtual machine just for that client, and do all work, install all required apps for that client inside that VM only. I am truly shocked at all the outrage posts with no mention of this.