Closed access — allowlisted emails only. Sign in with a password or a one-time code (no email is sent).