for linux systems where physical access could be compromised, which of the following best practices should be implemented to prevent a user from booting into single user mode with root access?