automatically disconnect idle console logins?

[Ben Russo]

I know about the bash shell TMOUT variable.
This seems to expect that the user logged in will not
just unset that variable.

Is there any way to *enforce* that logins on the console will be 
disconnected after a reasonable idle time (like 10 minutes?)

-Ben.