Protected by rate limiting, encrypted sessions and audit logging.