I think it will be automatically mounted somewhere right?

You tell me.

If so, I will watch that and I'll execute my script to ask password

How will that prevent users from placing and removing files on the device?