Operator access only. Agents authenticate with bearer tokens.