I turn my laptop off to clean it and avoid the power button while doing the cleaning. Was this not an option for you?
I've added a user account "Clean" and will do cleaning after locking the screen while logged into that account. If I happen to disable its login via failed logins due to keypresses while cleaning, I can switch back to my normal account and reset it.
currently, I'm fighting slack to make sure it doesn't update again.