The only problem I see with this approach is that a user could re-enable mouse/keyboard wakeup
options once logged in. If there were some way to disable all input peripherals by
controlling a bus signal, that would be perfect.
Are the users administrators???