Access is invitation-only. Authentication and access decisions are audited.