Use your email, password and authenticator code. Super-admins also confirm a passkey when configured.
Agents draft. People approve. Every change is versioned and reversible.