Tips on blocking user input during execution of an automation manager policy?

I was hoping the disable USB would do it, but it specifically exempts input devices.

Is there any easy way to block users from input while executing a script?