3 strikes policy (Score 0)

I'd give em three strikes to mess up. After that, bust out the keystroke logger. But be honest, let them know the keystroke loggers in place.