Protected by email verification and role-based access.