The MCS shall not have a built-in facility in which a gaming facility patron or employee can bypass the system auditing to modify the database directly. Gaming facilities shall maintain secure access control.