Access logged for audit. Unauthorised attempts are rate-limited and reported.