OK, passive entry has been defeated. Rear door is super easy: remove access panel and unplug connector. Front doors are more difficult. Bit of work to get the handles out, more work to put them back.
I added green masking tape around the body of the door plug. This creates a stopper so the connector can only go together part way. With the parts together I wound some electrical tape around the assembly so the wiring socket stays with the door handle plug. Also tied a bit of fishing line accross the assembly as a failsafe if the tape comes loose. I don't want anyone having to fish the wiring out of the door panel.
So now I have one press of the fob to unlock the drivers door (and lower the window half inch). Two presses will unlock all doors (and lower all windows half inch). If no one enters in about 30 sec all windows go back up. Vehicle remains unlocked. Press lock button on fob, all doors lock.
I tried using the manual key blade. 45 degree turn either way does the unlock. Remove key so door handle moves far enough to open door. Alarm message on dash demands the driver start the engine to cancel the alarm. When the alarm starts, the alarm button on the fob will pause the beeping but does not turn the alarm off.