Enable the Temp account only when needed...
If I had to have someone login to the remote server console, I would have the temp account ready, but would have the account disabled. On the enable, I would reset the password so that no one knows it but the person that is using it at that moment. Once the reboot is complete, disable the account and change the password again.