[pjmlp]

Not trusting someone with a regular laptop is common practice in enterprise consulting.

Either a VM accessible via citrix, RDP, X Windows, Bastille,.... or a throw away laptop locked down to the project.