Back office
We send a one-time link. No passwords — those have to be stored, recovered and rotated, while the link does the same job with less to look after.
The value of ADMIN_KEY. The way in when email is down.
ADMIN_KEY