Secure, location-locked, selfie-verified punch in/out.