I didn't expect this question to raise suspicions...but I can understand your concern. Let me ask something perhaps simpler, and less aromatic. Can I simply set the user's accounts up so that they can't use a password at all? There isn't any good reason for them to be able to lock others out, the individual accounts are just set up so each can pick their own backgrounds, etc.