Server-authorized management. No frontend privilege switches.
Sign in with the app owner account or an authorized administrator account.