Protected dashboard
One shared password protects the operator routes for now. When TOTP is configured, the dashboard also requires your authenticator code before granting full task access.