This requirement is intended to prevent unauthorized access to silencing switches. The satisfactory operation of a fire alarm system to alert the occupants of a building to an emergency is predicated on the assumption that the alarm signal will be silenced only after responsible staff have verified that no emergency exists.