I looked but didn't see much discussion on this?

Clients need to enter the correct password and there's
a variable to lock out if incorrect passwords are entered
so many times.

What level of security would satisfy your need?

I suppose it would be easy to lock down the ADSM server
databases too.  No databases, no recovery.  and the log
of all actions are there for you to see.

Chan