Private access for family operations.

Protected workspace access is limited to the configured family users.

Sessions use signed HttpOnly cookies and expire automatically.