I mean technically they can detain under citizen’s arrest/shopkeeper’s privilege, and then hand over to the proper authorities, or just deny access like a bouncer preventing underage drinkers from entering a bar, but neither seems like a good system.