Shared app password. Individual logins are not built yet. Unlock is rate-limited per visitor — brute-force guesses lock the gate.