This is a great point. The software should be modified to not allow the employee to even make any modifications to the account without the correct credentials.