Protect endpoint from regular users