Only the allowlisted address can sign in. Unauthorized attempts are logged.