The way I do it is that my startup form looks for a small text file somewhere on the hard drive. If it's there, then it allows the shift bypass, if it's not then is disables it. That way the shift bypass only works on my own computer (or any computer I choose) without my having to enter a password.
This is not my own idea. I wish I could remember where I read it but alas, I can't.