1
The PIN screen
Step away from a shared terminal and it locks — a PIN gets a staff member back in without signing out of the whole session.
2
Roles decide what unlocking gets you
Getting back in isn't the same as being able to do everything — roles and named sensitive actions still apply per area, every time.
3
A security history that actually shows something
Logins, lock events, and sensitive actions, attributed to the person who did them — not a blank audit tab nobody ever checks.
