1. A computer-implemented method comprising: authenticating first credentials of a user of a system before access is allowed to any device of a plurality of devices attached to the system; intercepting an event indicating a hot-plug attachment of a new device to the system, wherein the intercepting is performed by firmware in a secure partition of the system, and the secure partition is isolated from a host operating system of the system; requesting second credentials to access the new device using the firmware to establish trusted path connections to a display device to display a request for the second credentials and a user input device to receive the second credentials, wherein the second credentials are requested by the firmware without rebooting the system; authenticating the second credentials; enabling access to the new device after authenticating the second credentials; and delivering a hot plug event for the new device from the secure partition to the host operating system.