Authorized operators only. Unknown emails are rejected instead of auto-enrolled.