Emergency break-glass access

Only for when MigraAuth itself is unavailable. Uses the server's sealed account, and every attempt is logged.