restricted access — authenticate to continue
session lasts 30 days · cli keeps working with device keys