I have similar problem,
I do this :
1. I create default user as ("Family Member") that is meant as default user.
2. put all restricted scenarios in certain room ("Restricted")
3. then deny access for default user to room "Restricted"
"Family Member" is default user for Orbiter. If I want to do something special, I change user to me, get into Restricted, do stuff and then switch back to other room and default user...
HTH,
regards,
Bulek.