Authorised staff access only.
Use HTTPS in production. Administrative credentials must not be shared.