Any chance you could lock down his account (gatekeeper) and keep your own admin user? It's too bad there's no easy way to simply "grant access" to installs remotely (if you're the admin).