A method comprising: receiving, by a satellite device associated with a first user, a first message including a first configuration for a restricted mode of the satellite device from a controller device, the first configuration defined by a second user of the controller device and specifying a first time period during which the restricted mode will be enabled and identifying one or more first features of the satellite device that will be disabled during the restricted mode, wherein the first configuration is encrypted such that only the controller device and the satellite device can access the first configuration; determining, by the satellite device, that a first current time is within the first time period defined by the first configuration; based on a determination that the first current time is within the first time period, automatically enabling the restricted mode on the satellite device, including preventing the first user from accessing the one or more first features identified in the first configuration; and while in the restricted mode: providing, by the satellite device, the first user access to one or more second features of the satellite device that are different than the one or more features identified in the first configuration; presenting, by the satellite device, a mode exit control for disabling the restricted mode; receiving user input selecting the mode exit control; in response to receiving the user input selecting the mode exit control, displaying a mode exit presentation that requires the first user to conspicuously interact with the mode exit presentation; receiving conspicuous user interactions with the mode exit presentation from the first user; determining that the first user successfully performed required conspicuous user interactions with the mode exit presentation within a second time period; and based on a determination that the first user successfully performed the required conspicuous user interactions with the mode exit presentation within the second time period, automatically disabling the restricted mode on the satellite device, including allowing the first user to access the one or more first features identified in the first configuration. receiving, by a satellite device associated with a first user, a first message including a first configuration for a restricted mode of the satellite device from a controller device, the first configuration defined by a second user of the controller device and specifying a first time period during which the restricted mode will be enabled and identifying one or more first features of the satellite device that will be disabled during the restricted mode, wherein the first configuration is encrypted such that only the controller device and the satellite device can access the first configuration; determining, by the satellite device, that a first current time is within the first time period defined by the first configuration; based on a determination that the first current time is within the first time period, automatically enabling the restricted mode on the satellite device, including preventing the first user from accessing the one or more first features identified in the first configuration; and while in the restricted mode: providing, by the satellite device, the first user access to one or more second features of the satellite device that are different than the one or more features identified in the first configuration; presenting, by the satellite device, a mode exit control for disabling the restricted mode; receiving user input selecting the mode exit control; in response to receiving the user input selecting the mode exit control, displaying a mode exit presentation that requires the first user to conspicuously interact with the mode exit presentation; receiving conspicuous user interactions with the mode exit presentation from the first user; determining that the first user successfully performed required conspicuous user interactions with the mode exit presentation within a second time period; and based on a determination that the first user successfully performed the required conspicuous user interactions with the mode exit presentation within the second time period, automatically disabling the restricted mode on the satellite device, including allowing the first user to access the one or more first features identified in the first configuration. providing, by the satellite device, the first user access to one or more second features of the satellite device that are different than the one or more features identified in the first configuration; presenting, by the satellite device, a mode exit control for disabling the restricted mode; receiving user input selecting the mode exit control; in response to receiving the user input selecting the mode exit control, displaying a mode exit presentation that requires the first user to conspicuously interact with the mode exit presentation; receiving conspicuous user interactions with the mode exit presentation from the first user; determining that the first user successfully performed required conspicuous user interactions with the mode exit presentation within a second time period; and based on a determination that the first user successfully performed the required conspicuous user interactions with the mode exit presentation within the second time period, automatically disabling the restricted mode on the satellite device, including allowing the first user to access the one or more first features identified in the first configuration.