Authorized operators only
Protected access. Sessions use HTTP-only cookies (Secure flag when served over HTTPS).