Let's assume that she attempted to pull rank by flashing her credentials, as claimed in the incident report. What's the appropriate course of action for TSA to take then?

Isn't that the kind of thing that should be penalized or otherwise discouraged?