Operators should be able to lock out excitation
There should be control over every exciation, or perhaps just every model, so that operators can block anyone for enabling the excitation (or disabling, too?). Ultimately this could be controlled by guardian.