I don’t know if this is feasible from a software standup point. But maybe we could have a special input module with an NFC reader so that if a certain user wanted to login or access a special service/app they would have to tap the NFC module with their key. Either a keycard or a phone.
This could also be an expansion card.