Public access is limited to users approved by System Admin. Every approved user must verify with a passkey; email verification is used for first setup and fallback.