True, physical interception is probably the easiest method, at least for short term access. Once the captured user is identified and removed from the group they will lose access though.