To be clear. I don’t support this policy. What I’m suggesting is that by misleading/lying to an agent you might make it worse.

This sucks and is stupid, all forms of dragnet type operations are.

In this particular context, you could specifically discard 2fa tokens, etc., such that a password isn’t enough to login to these accounts. Now this might mean that your entry will be denied, but you will be incapable of giving them access to what they’re asking for.