Operator access only. Cron and ingest endpoints still use shared secrets.