I have a touchscreen only kiosk and i want to block the ports on the motherboard so no one can plug anything into it. This includes a keyboard, which i will still need to use to access the machine, so im thinking that whatever method could achieve this would have to be enabled after i log in...