Surely the thing you'd notice so you could lock them out is admin passwords being changed? Not that this fixes the root of the problem, it would just make you a

Surely the thing you'd notice so you could lock them out is admin passwords being changed? Not that this fixes the root of the problem, it would just make you aware that you had a problem.