Either prompt a username and password, or allow access from hidden admin accounts somehow