> forcing staff to hand over administrative credentials to allow forensic data collection.

What, thinking HQ wouldn't cancel them?

I'm sure an intelligent person such as yourself can think of ways around that possibility.