you have kiosk-based machines in the lobby and scattered through the facility. they do not require a login for guests to access certain items. what is the best way to protect these machines from users introducing trojans?