Far easier to have activity monitoring and logging, alerting and pausing on anything suspicious. The rogue operator will then be investigated and terminated, or even arrested, if need be.