Loopback
The staff back office. Cross-tenant on purpose: this is customers' data, and every write is recorded against your name.
Held for this tab only, and gone when you close it. It is not a password: the server hashes it, resolves the person it belongs to, and still refuses every write you have not elevated.