One option is to use Extension Mobility and have no DNs configured when the phone is logged out. This essentially locks the phone unless someone logs in to EM. You can also configure a timeout so that the phone automatically logs out an EM user after a set period of time.
Hope this helps.
Brandon
