Hello. We have a suggestion for the Endpoint. The suggestion is to lock the USB devices and allow the function to release with a password. It would be an additional option within the existing "block", "allow" and "read-only" actions.