Ref T4398. Protects these actions behind a security barrier:
- Link external account.
- Retrieve Conduit token.
- Reveal Passphrase credential.
- Create user.
- Admin/de-admin user.
- Rename user.
- Show conduit certificate.
- Make primary email.
- Change password.
- Change VCS password.
- Add SSH key.
- Generate SSH key.