Restricted access — every action is audit-logged.