http://blogs.ubuntu-nl.org/dennis/2008/03/22/user-management-tricks/ (The second part of the above link, not the launchpad content.) I guess if you have physical access, no machine is safe. I guess I really do need to consider encryption.