How do you ethically handle discovering vulnerabilities in physical security systems during network assessments?

Finding exposed building management systems, badge readers with default credentials, or IP cameras with no authentication raises questions beyond typical disclosure—these can impact physical safety, not just data. The responsible disclosure playbook doesn't always fit when you're dealing with facility teams who may not understand the risk or have budget to fix it quickly.