endpoint-employee: ux decision, password ctrl for barcode input