Administration requires a verification code.
Sessions expire after 7 days. Eight failed attempts locks the account for 15 minutes. Sign-in and sign-out are written to the tamper-evident audit trail.