>	actually if you allow direct access to the computer, you lose the
>	battle - she can pull the plug.  so for me it makes no much difference.
>	I'm okay to have a extra knob (sysctl?), or some daemon (maybe)
>	to allow ctl-alt-del, and *turned it off by default*.

	...and if possible, try to run "shutdown -h foo" instead of simple
	soft reset (this is why I wrote "daemon" above).

itojun