We certainly agree on the importance of making it easy and convenient for the users to behave well. The traditional example here is onerous password requirements that lead to post-it notes.

> Still, since workspace admin prompts us to relog every damn time, some colleagues use the service account to perform workspace actions. That's a hole of course, as the service account is not supposed to be used for user actions, but it's also more convenient.

This is a great point that I hadn't considered. Thank you!