pseudo_kiosk

https://github.com/jonmchan/pseudo_kiosk

PseudoKiosk gives the ability to limit access to the application during workflows which involve physically passing a device with elevated permissions to an unknown or untrusted user.