Restricted route

Administrator Gateway

This local credential route is intentionally not linked from the public sign-in page.

Break-glass recovery is filesystem controlled. The no-auth override defaults to localhost-only and never becomes an unrestricted public bypass unless the server-side scope is explicitly changed.